CVE-2006-6458: Trend Micro OfficeScan

High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero, which triggers an infinite loop.

Affected products

• Trend Micro OfficeScan: version 7.3 only
• Trend Micro Pc Cillin - Internet Security 2006: any version
• Trend Micro Serverprotect: version 5.58 only

Published 2006-12-11. Last modified 2026-06-16.