FYI…

- http://isc.sans.org/diary.php?date=2005-02-24
Updated February 25th 2005 04:49 UTC
"Just got word that Trend Micro has joined the ranks of A/V vendors who have issued advisories and patches to fix an ARJ file format parser vuln.
From: http://www.trendmicro.com/vinfo/secadvisor…+Code+execution :
…it is possible to create a specially-crafted ARJ archive file that overwrites data after the allocated 512-byte buffer. This specially-crafted file could possibly execute an arbitrary code…
Solution:
Upgrade your scan engine to VSAPI 7.510 or higher. For your specific product, go here:
- http://www.trendmicro.com/download/engine.asp …"

:ph34r: