CVE:CVE-2007-6386
CNNVD:CNNVD-200712-158
Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008,和Internet Security Pro 2008中的PccScan.dll版本之前的版本build 1451中存在栈缓冲区溢出，用户协助式的远程攻击者可以借助有一个超长名称的畸形的.zip文件造成拒绝服务(SfCtlCom.exe 崩溃),并使本地用户获得特权,例如一个特制的 .uue文件中格式字符串指定创立的.zip文件。
solution:Upgrade trend_micro trend_micro_antivirus_plus_antispyware to a higher version than 2008:bld_1450,and avoid the version 2008:bld_1450; Upgrade trend_micro trend_micro_internet_security__virus_bust to a higher version than 2008:bld_1451,and avoid the version 2008:bld_1451; Upgrade trend_micro trend_micro_internet_security_pro to a higher version than *