What’s Vulnerable › Vulnerabilities

CVE-2005-0533

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-02 · updated 2026-06-16

Description

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

Affected products

• Trend Micro Client-Server-Messaging Suite Smb: gold
• Trend Micro Client-Server Suite Smb: gold
• Trend Micro Control Manager: gold, netware
• Trend Micro Interscan Emanager: 3.5, 3.5.2, 3.6, 3.51, 3.51_j
• Trend Micro Interscan Messaging Security Suite: 3.81, 5.5, gold
• Trend Micro Interscan Viruswall: 3.0.1, 3.4, 3.5, 3.6, 3.6.5, 3.51 (+4)
• Trend Micro Interscan Web Security Suite: gold
• Trend Micro Interscan Webmanager: 1.2, 2.0, 2.1
• Trend Micro Interscan Webprotect: gold
• Trend Micro Officescan: 3.0, corporate_3.0, corporate_3.1.1, corporate_3.5, corporate_3.11, corporate_3.13 (+5)
• Trend Micro Pc-Cillin: 6.0, 2000, 2002, 2003
• Trend Micro Portalprotect: 1.0
• Trend Micro Scanmail: 2.6, 2.51, 3.8, 3.81, 6.1, gold
• Trend Micro Scanmail Emanager: all versions
• Trend Micro Serverprotect: 1.3, 1.25_2007-02-16, 2.5, 5.3.1

References

• http://secunia.com/advisories/14396
• http://securitytracker.com/id?1013289
• http://securitytracker.com/id?1013290
• http://www.securityfocus.com/bid/12643
• http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution
• http://xforce.iss.net/xforce/alerts/id/189
• http://secunia.com/advisories/14396
• http://securitytracker.com/id?1013289
• http://securitytracker.com/id?1013290
• http://www.securityfocus.com/bid/12643
• http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution
• http://xforce.iss.net/xforce/alerts/id/189

Get alerted when CVE-2005-0533 or the next vulnerability affects your stack