trendmicro officescan - vulnerabilities and exploits

(subscribe to this query)

890

VMScore

A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an malicious user to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be ...

Trendmicro Maximum Security Trendmicro Antivirus \\+ Security Trendmicro Internet Security Trendmicro Premium Security Trendmicro Officescan 12.0 Trendmicro Officescan 11.0 Trendmicro Officescan Monthly 12.0 Trendmicro Officescan Monthly 11.0

1 Github repository

356

VMScore

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a malicious user to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability.

Trendmicro Officescan 11.0 Trendmicro Officescan Xg

685

VMScore

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow malicious users to execute arbitrary code on vulnerable installations.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

785

VMScore

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to b...

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

505

VMScore

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an malicious user to spoof a particular Host header, allowing the malicious user to render arbitrary links that point to a malicious website with poisoned Host header webpages.

Trendmicro Officescan 11.0 Trendmicro Officescan 12.0

1 EDB exploit

755

VMScore

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

481

VMScore

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local malicious user to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220008 in the TMWFP driver. An attacker must first o...

Trendmicro Officescan Xg Trendmicro Officescan 11.0

578

VMScore

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a malicious user to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.

Trendmicro Officescan 11.0 Trendmicro Officescan Xg

383

VMScore

Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build prior to 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

409

VMScore

A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated malicious user to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have lo...

Trendmicro Officescan 11.0 Trendmicro Officescan Xg

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook