Officescan (Trend Micro) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2019-04-05. Vendor: Trend Micro.

CVEs of Officescan

CVE-2019-9489 - CVSS 7.5 (high), 2019-04-05: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0)…
CVE-2008-3864 - CVSS 5 (medium), 2009-01-21: The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0…
CVE-2008-3866 - CVSS 4.6 (medium), 2009-01-21: The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1…
CVE-2008-3865 - CVSS 10 (critical), 2009-01-21: Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC)…
CVE-2008-3862 - CVSS 10 (critical), 2008-10-23: Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1…
CVE-2008-4402 - CVSS 10 (critical), 2008-10-03: Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote…
CVE-2008-2439 - CVSS 5 (medium), 2008-10-03: Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3…
CVE-2008-4403 - CVSS 5 (medium), 2008-10-03: The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a…
CVE-2008-2437 - CVSS 10 (critical), 2008-09-16: Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client…
CVE-2008-3364 - CVSS 9.3 (critical), 2008-07-30: Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment…
CVE-2007-3455 - CVSS 10 (critical), 2007-06-27: cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain…
CVE-2007-3454 - CVSS 10 (critical), 2007-06-27: Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary…
CVE-2007-0851 - CVSS 9.3 (critical), 2007-02-08: Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC)…
CVE-2006-6458 - CVSS 7.8 (high), 2006-12-11: The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan…
CVE-2006-6179 - CVSS 7.5 (high), 2006-11-30: Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to…
CVE-2006-6178 - CVSS 7.5 (high), 2006-11-30: Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute…
CVE-2006-5212 - CVSS 5 (medium), 2006-10-10: Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before…
CVE-2006-5157 - CVSS 5.1 (medium), 2006-10-05: Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote…
CVE-2006-1381 - CVSS 10 (critical), 2006-03-24: Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges…
CVE-2005-3379 - CVSS 5.1 (medium), 2005-10-30: Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows…
CVE-2005-0533 - CVSS 7.5 (high), 2005-05-02: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute…
CVE-2004-2430 - CVSS 7.2 (high), 2004-12-31: Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which…
CVE-2004-2006 - CVSS 4.6 (medium), 2004-05-07: Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users…
CVE-2003-1341 - CVSS 7.5 (high), 2003-12-31: The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and…
CVE-2002-1349 - CVSS 4.6 (medium), 2002-12-18: Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3).
CVE-2001-1151 - CVSS 5 (medium), 2001-10-15: Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory…
CVE-2001-1150 - CVSS 5 (medium), 2001-08-22: Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary…
CVE-2000-0205 - CVSS 6.4 (medium), 2000-03-03: Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
CVE-2000-0203 - CVSS 5 (medium), 2000-02-28: The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0204 - CVSS 5 (medium), 2000-02-28: The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to…