CVE:CVE-2007-0851
CNNVD:CNNVD-200702-172
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 
Trend Micro的病毒扫描引擎在扫描特制的畸形UPX压缩可执行程序时没有正确验证输入，远程攻击者可能利用此漏洞在服务器上执行任意指令。
如果用户扫描了畸形文件的话，就可能触发缓冲区溢出，导致执行任意指令。在Windows下扫描引擎在内核环境中运行；在Linux下扫描引擎运行为超级用户权限的守护程序。因此，成功利用这个漏洞的攻击者可以获得对受影响系统的完全控制。
solution:Upgrade trend_micro client-server-messaging_suite_smb to a higher version than gold,and avoid the version gold; Upgrade trend_micro client-server_suite_smb to a higher version than gold,and avoid the version gold; Upgrade trend_micro control_manager to a higher version than 2.5.0,3.5,gold,netware,and avoid the version 2.5.0,3.5,gold,netware; Upgrade trend_micro interscan_emanager to a higher version than 3.5,3.5.2,3.6,3.51,3.51_j,and avoid the version 3.5,3.5.2,3.6,3.51,3.51_j; Upgrade trend_micro interscan_messaging_security_suite to a higher version than *,3.81,5.5,5.5_build_1183,gold,and avoid the version 3.81,5.5,5.5_build_1183,gold; Upgrade trend_micro interscan_viruswall to a higher version than 3.0.1,3.1.0,3.2.3,3.3,3.6,3.6.0_build_1182,3.6.0_build1166,3.6.5,3.7.0,3.7.0_build1190,3.8.0_build1130,3.32,3.81,5.1,gold,and avoid the version 3.0.1,3.1.0,3.2.3,3.3,3.6,3.6.0_build_1182,3.6.0_build1166,3.6.5,3.7.0,3.7.0_build1190,3.8.0_build1130,3.32,3.81,5.1,gold; Upgrade trend_micro interscan_viruswall_for_windows_nt to a higher version than 3.4,3.5,3.6,3.51,3.52,3.52_build1466,5.1.0,and avoid the version 3.4,3.5,3.6,3.51,3.52,3.52_build1466,5.1.0; Upgrade trend_micro interscan_viruswall_scan_engine to a higher version than 7.510.0-1002,and avoid the version 7.510.0-1002; Upgrade trend_micro interscan_web_security_suite to a higher version than *,gold,and avoid the version gold; Upgrade trend_micro interscan_webmanager to a higher version than 1.2,2.0,2.1,and avoid the version 1.2,2.0,2.1; Upgrade trend_micro interscan_webprotect to a higher version than gold,and avoid the version gold; Upgrade trend_micro officescan to a higher version than 3.0,4.5.0,7.3,corporate_3.0,corporate_3.1.1,corporate_3.5,corporate_3.11,corporate_3.13,corporate_3.54,corporate_5.02,corporate_5.5,corporate_5.58,corporate_6.5,corporate_7.0,corporate_7.3,and avoid the version 3.0,4.5.0,7.3,corporate_3.0,corporate_3.1.1,corporate_3.5,corporate_3.11,corporate_3.13,corporate_3.54,corporate_5.02,corporate_5.5,corporate_5.58,corporate_6.5,corporate_7.0,corporate_7.3; Upgrade trend_micro pc-cillin to a higher version than 6.0,2000,2002,2003,2005,2006,and avoid the version 6.0,2000,2002,2003,2005,2006; Upgrade trend_micro pc-cillin_internet_security to a higher version than 14_14.00.1485,2005_12.0.0_0_build_1244,2006_14.10.0.1023,2007,and avoid the version 14_14.00.1485,2005_12.0.0_0_build_1244,2006_14.10.0.1023,2007; Upgrade trend_micro pc_cillin_-_internet_security_2006 to a higher version than *; Upgrade trend_micro portalprotect to a higher version than 1.0,1.2,and avoid the version 1.0,1.2; Upgrade trend_micro scanmail to a higher version than 1.0.0,2.6,2.51,3.8,3.81,6.1,gold,and avoid the version 1.0.0,2.6,2.51,3.8,3.81,6.1,gold; Upgrade trend_micro scanmail_emanager to a higher version than *; Upgrade trend_micro scanning_engine to a higher version than 7.1.0,and avoid the version 7.1.0; Upgrade trend_micro serverprotect to a higher version than 5.3.1,5.5.8,5.58,linux,linux_1.2.0,novell_netware,windows,and avoid the version 5.3.1,5.5.8,5.58,linux,linux_1.2.0,novell_netware,windows; Upgrade trend_micro viruswall to a higher version than 3.0.1,and avoid the version 3.0.1; Upgrade trend_micro web_security_suite to a higher version than 1.2.0,and avoid the version 1.2.0; Upgrade trend_micro webprotect to a higher version than 3.1.0,and avoid the version 3.1.0