Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability

["labs-no-reply () idefense com" <labs-no-reply () idefense com>]

Matt,

We don't disagree with you. The vulnerability lies in the Microsoft 
Foundation Classes (MFC) static libraries. Trend Micro also acknowledges 
this in their response. Unfortunately, Trend Micro's product 
distributions are vulnerable since they ship with the old static libraries.

Michael Sutton
Director, iDefense Labs

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/