trend micro vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterpr...

Trend Micro Trend Micro Antirootkit Common Module Trend Micro Trend Micro Antispyware 3.0 Sp2 Trend Micro Client-server-messaging Security 3.5 Trend Micro Damage Cleanup Services 3.2 Trend Micro Trend Micro Antivirus 2007 Trend Micro Vsapini.sys 3.320.1003 Trend Micro Pc-cillin Internet Security 2007 Trend Micro Tmcomm.sys 1.5.1052 Trend Micro Trend Micro Antispyware 3.2 Sp1 Trend Micro Trend Micro Antispyware 3.5

7.5

CVSSv2

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, as used in multiple Trend Micro products, allows remote malicious users to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

7.2

CVSSv2

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.

Trend Micro Officescan 3.0 Trend Micro Officescan Corporate 3.11 Trend Micro Officescan Corporate 3.54 Trend Micro Officescan Corporate 5.02 Trend Micro Officescan Corporate 5.5 Trend Micro Officescan Corporate 5.58 Trend Micro Officescan Corporate 3.13 Trend Micro Officescan Corporate 3.5

9.3

CVSSv2

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote malicious users to execute arbitrary code via a malformed UPX compressed executable.

Trend Micro Control Manager Gold Trend Micro Interscan Emanager 3.51 J Trend Micro Interscan Emanager 3.6 Trend Micro Interscan Messaging Security Suite Gold Trend Micro Interscan Viruswall 3.6 Trend Micro Interscan Viruswall 3.6.0 Build 1182 Trend Micro Interscan Viruswall 3.6.0 Build1166 Trend Micro Interscan Viruswall 3.8.0 Build1130 Trend Micro Interscan Viruswall 3.81 Trend Micro Interscan Viruswall For Windows Nt 3.4 Trend Micro Interscan Viruswall For Windows Nt 3.5 Trend Micro Interscan Web Security Suite Trend Micro Interscan Web Security Suite Gold Trend Micro Officescan 3.0 Trend Micro Officescan 4.5.0 Trend Micro Officescan Corporate 3.13 Trend Micro Officescan Corporate 3.5 Trend Micro Control Manager 2.5.0 Trend Micro Control Manager 3.5 Trend Micro Interscan Emanager 3.5 Trend Micro Interscan Emanager 3.51 Trend Micro Interscan Messaging Security Suite 5.5 Build 1183

4.6

CVSSv2

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection.

Trend Micro Officescan 3.0 Trend Micro Officescan Corporate 5.02 Trend Micro Officescan Corporate 5.58 Trend Micro Officescan Corporate 3.5 Trend Micro Officescan Corporate 3.54 Trend Micro Officescan Corporate 3.11 Trend Micro Officescan Corporate 3.13

7.5

CVSSv2

The default installation of Trend Micro OfficeScan 3.0 up to and including 3.54 and 5.x allows remote malicious users to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.

Trend Micro Officescan 3.1.1 Trend Micro Officescan 3.13 Trend Micro Officescan 3.5 Trend Micro Officescan 3.0 Trend Micro Officescan 3.54 Trend Micro Officescan 3.11 Trend Micro Virus Buster 3.52 Trend Micro Virus Buster 3.53 Trend Micro Virus Buster 3.54

1 EDB exploit

7.2

CVSSv2

Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote malicious users to cause a denial of service (SfCtlCom.exe crash), and allows local user...

Trend Micro Trend Micro Antivirus Plus Antispyware 2008 Trend Micro Trend Micro Internet Security Virus Bust 2008 Trend Micro Trend Micro Internet Security Pro

7.5

CVSSv2

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) prior to 5.5.0.1823 and 6.0 prior to 6.0.0.1449 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Trend Micro Control Manager 3.5 Trend Micro Control Manager 3.0 Trend Micro Control Manager Trend Micro Control Manager 5.5 Trend Micro Control Manager 2.5 Trend Micro Control Manager 2.1 Trend Micro Control Manager 5.0 Trend Micro Control Manager 2.0 Trend Micro Control Manager 6.0

1 EDB exploit

5

CVSSv2

Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 prior to 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 prior to 6.5.0.1418, 7.0 prior to 7.0.0.1257, and 7.3 prior to 7.3.0.1053 allow remote malicious users to delete files via a modified fil...

Trend Micro Officescan 6.0 Trend Micro Officescan Corporate 6.5 Trend Micro Officescan Corporate 7.0 Trend Micro Officescan Corporate 7.3

5

CVSSv2

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 up to and including 3.5.4 allows remote malicious users to read arbitrary files.

Trend Micro Officescan Corporate 3.54 Trend Micro Virus Buster Corporate 3.52 Trend Micro Virus Buster Corporate 3.53 Trend Micro Virus Buster Corporate 3.54 Trend Micro Officescan Corporate 3.5

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook