Read the docs
TI-2006-00621 Aliases CVE-2006-0642GHSA-w457-rmww-h243

Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files," which may be too low in certain circumstances, which allows remote attackers to bypass anti-virus checks by sending compressed archives containing many small files. NOTE: since this is related to a configuration setting that has an operational impact that might vary depending on the environment, and the product is claimed to report a message when the compressed file exceeds specified limits, perhaps this should not be included in CVE.

Why it matters now

EPSS 0.01919 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:trend_micro:interscan_messaging_security_suite:*:*:*:*:*:*:*:*all versionsVulnerableTrend Micro
cpe:2.3:a:trend_micro:interscan_web_security_suite:*:*:*:*:*:*:*:*all versionsVulnerableTrend Micro
cpe:2.3:a:trend_micro:serverprotect:5.58:*:emc:*:*:*:*:*5.58VulnerableTrend Micro
  • cpe:2.3:a:trend_micro:interscan_messaging_security_suite:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Trend Micro
  • cpe:2.3:a:trend_micro:interscan_web_security_suite:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Trend Micro
  • cpe:2.3:a:trend_micro:serverprotect:5.58:*:emc:*:*:*:*:* Versions 5.58 Vulnerable ·Trend Micro

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0642
  2. 2026-10-03 Alias added: GHSA-w457-rmww-h243

References

Advisory 2

  • TI-2007-00828 Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file… CVSS 2.0HIGH 9.3
  • TI-2005-00489 Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used… CVSS 2.0HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences