Feeds

Danger UPX

Trend Micro warns of scan engine glitch

Remote control for virtualized desktops

Trend Micro is urging users to update their anti-virus software following the discovery of a bug in its scanning software that might be misused to either crash vulnerable systems or load malware.

The flaw, which involves a buffer overrun security bug in the UPX parsing component of both enterprise and consumer versions of Trend's software, can be resolved by updating the UPX parsing algorithm of the software by applying virus pattern file 4.245.00 or higher. Corrected updates also provide generic detection of malformed UPX (compressed) files.

Trend Micro's upcoming 8.5 release of its software will include these fixes as standard.

Anti-virus products designed to keep users safe from virus attacks have themselves fairly frequently become an increasing source of security bugs. For example, during 2005 security vendor ISS has issued alerts over similar but distinct vulnerabilities in various security packages from Symantec, involving the processing of UPX compressed files; and anti-virus products from F-Secure and Trend Micro, both involving the handling of ARJ archive files.

Last month, admins upgrading to the latest version of McAfee's VirusScan Enterprise reported problems with client applications of Lotus Notes, in some cases requiring IT administrators to reinstall the email program. ®

Choosing a cloud hosting partner with confidence

Whitepapers

Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.