ISS dealt with a flaw in its own security products nearly a year ago.
Trend Micro's advisory recommends that customers update their antivirus software to version 7.510, which fixes the problem. "We created a solution to it in a couple of days and.alerted our customers about the problem."Īmong the products that are affected by the problem are various versions of Trend Micro InterScan, Trend Micro ScanMail and Trend Micro ServerProtect. "We looked at the issue, we verified it and found it to be true," said Joe Hartmann, North American director of antivirus research for Trend Micro.
It affects not only Trend Micro applications on Windows systems, but also the company's software running on Linux, Solaris and other Unix-like operating systems. The flaw is caused by a memory error known as a heap overflow.
Because it's a library flaw, it adds up to a broad vulnerability in Trend Micro products that could be exploited to automatically run a malicious program. The flaw is similar to those found in antivirus software from Symantec and F-Secure. "Successful exploitation of this vulnerability could be used to gain unauthorized access to networks and machines being protected by Trend Micro Antivirus Library products," ISS said in its advisory.
An attacker could create a program that exploits the security hole, causing the antivirus program to run a virus instead of blocking the malicious program, the companies said.
The vulnerability affects Trend Micro's Antivirus Library, a common set of code used by at least 29 Trend Micro products, according to separate advisories posted on Trend Micro's Web site on Wednesday and on ISS' site on Thursday.
The read test was also discouraging, with the Plextor taking more than 3 minutes to install Microsoft Office Small Business Edition.Internet Security Systems has found a flaw in Trend Micro's virus-scanning software-the third time this month that the security company has picked a hole in an antivirus product. In the write tests, the Plextor lagged behind lesser-rated drives, such as the 32X CenDyne Lightning II and even the 24X Yamaha CRW3200EZ. Unfortunately, despite its impressive specs, the PlexWriter failed to impress in CNET Labs' tests. Time, in minutes, to install Microsoft Office 2000 Small Business Edition (shorter bars indicate better performance) Time, in minutes, to extract a 26-minute, 58-second audio track (shorter bars indicate better performance) Packet-write from hard drive to CD-RW (400MB directory) Single-session data burn to CD-R (500MB directory) Time, in minutes, to complete tasks (shorter bars indicate better performance)Īudio burn to CD-R from image on hard drive (from 43 min., 11 sec. Plextor also touts a new, black CD tray that reduces certain kinds of errors and an enhanced chipset that helps reduce electrical interference and jitter (digital distortion) levels. The first is Burn-Proof buffer management though not exactly new, this feature lets you multitask while burning CDs, without the risk of encountering buffer-underrun errors that render your discs unusable. Anyway, there's more to life than numbers, and Plextor introduces a few bells and whistles with the drive. Plextor is aware of this but believes that its customers prefer Roxio for its reliability and ease of use. The drive's disappointing overall performance was most likely due to the Roxio Easy CD Creator software, which is slower than competing packages such as Ahead Nero Burning ROM. Redemption came in the audio-extraction test, where the Plextor ripped a 27-minute track in a respectable 1 minute, 2 seconds. The read test was also discouraging, with the Plextor taking more than 3 minutes to install Microsoft Office Small Business Edition. You can download, play, or stream audio files with Plextor Liquid Player+, but the star of the show is Plextor Manager 2000, which combines a powerful audio utility and a disc-copying utility called DiscDupe 2000.
The installation disc starts off with Roxio Easy CD Creator Basic and DirectCD for CD mastering and packet writing, as well as a trial version of Click'N Design 3D for CD and jewel-case labels. But despite its cutting-edge ratings, the PlexWriter trailed behind its peers in our performance tests. And the company continues its tradition of meticulous attention to detail with comprehensive documentation, a stout software bundle, and hardware innovations. What do you expect from a 40X CD-RW drive? With 40X write, 12X rewrite, and 40X read ratings, the PlexWriter should be bounding ahead of its 32X/10X/40X competitors.