CVE-2021-25252
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - security@trendmicro.com
- Published
- 2021-03-03
- Last modified
- 2024-08-03
- Weaknesses
- CWE-400
Affected products
- Trend Micro Virus Scan Api Vsapi Engine (Trend Micro)
- Apex Central (Trendmicro)
- Apex One (Trendmicro)
- Cloud Edge (Trendmicro)
- Control Manager (Trendmicro)
- Deep Discovery Analyzer (Trendmicro)
- Deep Discovery Email Inspector (Trendmicro)
- Deep Discovery Inspector (Trendmicro)
- Deep Security (Trendmicro)
- Interscan Messaging Security Virtual Appliance (Trendmicro)
- Interscan Web Security Virtual Appliance (Trendmicro)
- Officescan (Trendmicro)
- Portal Protect (Trendmicro)
- Safe Lock (Trendmicro)
- Scanmail (Trendmicro)
- Scanmail For Ibm Domino (Trendmicro)
- Serverprotect (Trendmicro)
- Serverprotect For Network Appliance Filers (Trendmicro)
- Serverprotect For Storage (Trendmicro)
- Worry-free Business Security (Trendmicro)
References
- https://success.trendmicro.com/solution/000285675
