CVE-2021-25252

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.

Link	Resource
https://success.trendmicro.com/solution/000285675	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:trendmicro:cloud_edge:5.0:*:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security:20.0:-:*:*:long_term_support:*:*:* cpe:2.3:a:trendmicro:deep_security:11.0:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security:12.0:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security:10.0:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_discovery_analyzer:5.1:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_discovery_email_inspector:2.5:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:-:*:*:*:*:*:*

---

Published : 2021-03-03 04:15

Updated : 2021-09-08 05:23

---

NVD link : CVE-2021-25252

Mitre link : CVE-2021-25252

Control Manager

Trendmicro

CWE-400