trendmicro officescan xg 12.0 vulnerabilities and exploits

(subscribe to this query)

614

VMScore

Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local malicious users to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attack...

Trendmicro Officescan Xg 12.0 Trendmicro Officescan 11.0

169

VMScore

A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local malicious user to disclose sensitive information on vulnerable installations. An attacker must first obtain the ability to execute low-p...

Trendmicro Officescan Xg 12.0

446

VMScore

Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE...

Trendmicro Officescan Xg Trendmicro Officescan 11.0

755

VMScore

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

505

VMScore

Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.

Trendmicro Officescan 11.0 Trendmicro Officescan 12.0

1 EDB exploit

505

VMScore

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

505

VMScore

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an malicious user to spoof a particular Host header, allowing the malicious user to render arbitrary links that point to a malicious website with poisoned Host header webpages.

Trendmicro Officescan 11.0 Trendmicro Officescan 12.0

1 EDB exploit

785

VMScore

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to b...

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

685

VMScore

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow malicious users to execute arbitrary code on vulnerable installations.

Trendmicro Officescan 12.0 Trendmicro Officescan 11.0

1 EDB exploit

1000

VMScore

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote malicious users to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.

Trendmicro Officescan 11.0 Trendmicro Officescan 12.0

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook