CVE-2021-25252

5.5MEDIUM

Key Information:

Vendor
Trend Micro
Status
Trend Micro Virus Scan Api (vSAPi) Engine
Vendor
CVE Published:
3 March 2021

Summary

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.

Affected Version(s)

Trend Micro Virus Scan API (VSAPI) Engine 12.0

References

https://success.trendmicro.com/solution/000285675
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.