full-disclosure - iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed Dec 14 22:58:07 2005
From: labs-no-reply at idefense.com (labs-no-reply@...fense.com)
Subject: iDefense Security Advisory 12.14.05: Trend
	Micro ServerProtect relay.dll Chunked Overflow Vulnerability

Matt,

We don't disagree with you. The vulnerability lies in the Microsoft 
Foundation Classes (MFC) static libraries. Trend Micro also acknowledges 
this in their response. Unfortunately, Trend Micro's product 
distributions are vulnerable since they ship with the old static libraries.

Michael Sutton
Director, iDefense Labs