From PC World. . .

The antivirus scanning engine used in virtually every Trend Micro product is plagued by a critical flaw that can be used by attackers to take down or hijack PCs, several security organizations said today. A patch has been issued by Trend Micro to plug the hole.

The bug, which can be exploited by getting the scanning engine to process a malformed UPX compressed executable file, can cause a buffer overflow on systems running the Tokyo-based company's Client Server, InterScan, OfficeScan, PC-cillin, ScanMail and ServerProtect product lines, according to Danish vulnerability tracker Secunia and French counterpart, FrSIRT. The two pegged the risk as "Extremely Critical" and "Critical," respectively.

Full Story