Remote Code Execution Flaw in InterScan VirusWall by Trend Micro

CVE-2002-0637

What is CVE-2002-0637?

InterScan VirusWall version 3.52 build 1462 has a vulnerability that enables remote attackers to bypass its virus protection mechanism. This issue arises from improperly handled email headers that deviate from established RFC specifications, particularly due to unexpected space characters in headers. This can occur in fields such as 'Content-Type' and 'Content-Transfer-Encoding', or the absence of a space before boundary declarations. Exploiting this flaw may permit malicious code to be delivered via email without adequate detection, compromising email security and potentially leading to unauthorized access to affected systems.

References