|
TrendMicro's Antivirus products are widely used, especially in medium to large companies. The Internet Security Systems Protection Advisory has published an advisory concerning flaw in the ARJ parsing engine used by the entire TrendMicro Antivirus line that has been discovered and researched by Alex Wheeler of the ISS X-Force.
| |
|
The flaw means that an attacker constructing an e-mail with an ARJ-compressed attachment with a specially crafted long name can cause a code to be launched on the server.
TrandMicro acknowledges this flaw and provides a fix for its Exchange protection product here:
http://www.trendmicro.com/ftp/products/engine/vsapi-32DLL-7.510-1002.ZIP
Currently working as Project Manager and Systems Consultant, heading and consulting on Exchange and NT/Windows 2000 based migrations and deployments for large companies such as Checkpoint, Comverse, Smarteam, Nice, Aladdin and leading Israeli Banks, Also involved in writing scripts and custom solutions for clients based on ADSI, CDO and Visual Basic and teaching Windows 2000 and Exchange 2000 in MSCE colleges and lecturing in Microsoft User Groups.
Discuss your Exchange Server issues with thousands of other Exchange experts. Click here to join!
Order today Amazon.com
Special Preview: Read Chapter 9 here
