CVE-2007-0851

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-02-08

Last modified

2024-08-07

Affected products

• Client-server-messaging Suite Smb (Trend Micro)
• Client-server Suite Smb (Trend Micro)
• Control Manager (Trend Micro)
• Interscan Emanager (Trend Micro)
• Interscan Messaging Security Suite (Trend Micro)
• Interscan Viruswall (Trend Micro)
• Interscan Viruswall For Windows Nt (Trend Micro)
• Interscan Viruswall Scan Engine (Trend Micro)
• Interscan Web Security Suite (Trend Micro)
• Interscan Webmanager (Trend Micro)
• Interscan Webprotect (Trend Micro)
• Officescan (Trend Micro)
• Pc-cillin (Trend Micro)
• Pc-cillin Internet Security (Trend Micro)
• Pc Cillin - Internet Security 2006 (Trend Micro)
• Portalprotect (Trend Micro)
• Scanmail (Trend Micro)
• Scanmail Emanager (Trend Micro)
• Scanning Engine (Trend Micro)
• Serverprotect (Trend Micro)
• Viruswall (Trend Micro)
• Web Security Suite (Trend Micro)
• Webprotect (Trend Micro)

References

• http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
• http://jvn.jp/jp/JVN%2377366274/index.html
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
• http://osvdb.org/33038
• http://secunia.com/advisories/24087
• http://secunia.com/advisories/24128
• http://securitytracker.com/id?1017601
• http://securitytracker.com/id?1017602
• http://securitytracker.com/id?1017603
• http://www.jpcert.or.jp/at/2007/at070004.txt
• http://www.kb.cert.org/vuls/id/276432
• http://www.securityfocus.com/bid/22449
• http://www.vupen.com/english/advisories/2007/0522
• http://www.vupen.com/english/advisories/2007/0569
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32352