CVE-2005-0533: Trend Micro Client-Server-Messaging Suite SMB

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

Affected products

• Trend Micro Client-Server-Messaging Suite SMB: version gold only
• Trend Micro Client-Server Suite SMB: version gold only
• Trend Micro Control Manager: version gold only; version netware only
• Trend Micro Interscan Emanager: version 3.5 only; version 3.5.2 only; version 3.6 only; version 3.51 only; version 3.51_j only
• Trend Micro Interscan Messaging Security Suite: version 3.81 only; version 5.5 only; version gold only
• Trend Micro Interscan Viruswall: version 3.0.1 only; version 3.4 only; version 3.5 only; version 3.6 only; version 3.6.5 only; version 3.51 only; …
• Trend Micro Interscan Web Security Suite: version gold only
• Trend Micro Interscan Webmanager: version 1.2 only; version 2.0 only; version 2.1 only
• Trend Micro Interscan Webprotect: version gold only
• Trend Micro OfficeScan: version 3.0 only; version corporate_3.0 only; version corporate_3.1.1 only; version corporate_3.5 only; version corporate_3.11 only; version corporate_3.13 only; …
• Trend Micro Pc-Cillin: version 6.0 only; version 2000 only; version 2002 only; version 2003 only
• Trend Micro Portalprotect: version 1.0 only
• Trend Micro Scanmail: version 2.6 only; version 2.51 only; version 3.8 only; version 3.81 only; version 6.1 only; version gold only
• Trend Micro Scanmail Emanager: any version
• Trend Micro Serverprotect: version 1.3 only; version 1.25_2007-02-16 only; version 2.5 only; version 5.3.1 only

Published 2005-05-02. Last modified 2026-06-16.