CVE-2007-0851 Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execut...
HighCVSS 9.3
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro client-server-messaging suite smb | = gold | No fix listed |
| trend micro client-server suite smb | = gold | No fix listed |
| trend micro control manager | = 2.5.0 | No fix listed |
| trend micro control manager | = 3.5 | No fix listed |
| trend micro control manager | = gold | No fix listed |
| trend micro control manager | = netware | No fix listed |
| trend micro interscan emanager | = 3.5 | No fix listed |
| trend micro interscan emanager | = 3.5.2 | No fix listed |
| trend micro interscan emanager | = 3.6 | No fix listed |
| trend micro interscan emanager | = 3.51 | No fix listed |
| trend micro interscan emanager | = 3.51_j | No fix listed |
| trend micro interscan messaging security suite | All versions | No fix listed |
| trend micro interscan messaging security suite | = 3.81 | No fix listed |
| trend micro interscan messaging security suite | = 5.5 | No fix listed |
| trend micro interscan messaging security suite | = 5.5_build_1183 | No fix listed |
| trend micro interscan messaging security suite | = gold | No fix listed |
| trend micro interscan viruswall | = 3.0.1 | No fix listed |
| trend micro interscan viruswall | = 3.1.0 | No fix listed |
| trend micro interscan viruswall | = 3.2.3 | No fix listed |
| trend micro interscan viruswall | = 3.3 | No fix listed |
| trend micro interscan viruswall | = 3.6 | No fix listed |
| trend micro interscan viruswall | = 3.6.0_build_1182 | No fix listed |
| trend micro interscan viruswall | = 3.6.0_build1166 | No fix listed |
| trend micro interscan viruswall | = 3.6.5 | No fix listed |
| trend micro interscan viruswall | = 3.7.0 | No fix listed |
Show 67 more
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro interscan viruswall | = 3.7.0_build1190 | No fix listed |
| trend micro interscan viruswall | = 3.8.0_build1130 | No fix listed |
| trend micro interscan viruswall | = 3.32 | No fix listed |
| trend micro interscan viruswall | = 3.81 | No fix listed |
| trend micro interscan viruswall | = 5.1 | No fix listed |
| trend micro interscan viruswall | = gold | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.4 | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.5 | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.6 | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.51 | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.52 | No fix listed |
| trend micro interscan viruswall for windows nt | = 3.52_build1466 | No fix listed |
| trend micro interscan viruswall for windows nt | = 5.1.0 | No fix listed |
| trend micro interscan viruswall scan engine | = 7.510.0-1002 | No fix listed |
| trend micro interscan web security suite | All versions | No fix listed |
| trend micro interscan web security suite | = gold | No fix listed |
| trend micro interscan webmanager | = 1.2 | No fix listed |
| trend micro interscan webmanager | = 2.0 | No fix listed |
| trend micro interscan webmanager | = 2.1 | No fix listed |
| trend micro interscan webprotect | = gold | No fix listed |
| trend micro officescan | = 3.0 | No fix listed |
| trend micro officescan | = 4.5.0 | No fix listed |
| trend micro officescan | = 7.3 | No fix listed |
| trend micro officescan | = corporate_3.0 | No fix listed |
| trend micro officescan | = corporate_3.1.1 | No fix listed |
| trend micro officescan | = corporate_3.5 | No fix listed |
| trend micro officescan | = corporate_3.11 | No fix listed |
| trend micro officescan | = corporate_3.13 | No fix listed |
| trend micro officescan | = corporate_3.54 | No fix listed |
| trend micro officescan | = corporate_5.02 | No fix listed |
| trend micro officescan | = corporate_5.5 | No fix listed |
| trend micro officescan | = corporate_5.58 | No fix listed |
| trend micro officescan | = corporate_6.5 | No fix listed |
| trend micro officescan | = corporate_7.0 | No fix listed |
| trend micro officescan | = corporate_7.3 | No fix listed |
| trend micro pc-cillin | = 6.0 | No fix listed |
| trend micro pc-cillin | = 2000 | No fix listed |
| trend micro pc-cillin | = 2002 | No fix listed |
| trend micro pc-cillin | = 2003 | No fix listed |
| trend micro pc-cillin | = 2005 | No fix listed |
| trend micro pc-cillin | = 2006 | No fix listed |
| trend micro pc-cillin internet security | = 14_14.00.1485 | No fix listed |
| trend micro pc-cillin internet security | = 2005_12.0.0_0_build_1244 | No fix listed |
| trend micro pc-cillin internet security | = 2006_14.10.0.1023 | No fix listed |
| trend micro pc-cillin internet security | = 2007 | No fix listed |
| trend micro pc cillin - internet security 2006 | All versions | No fix listed |
| trend micro portalprotect | = 1.0 | No fix listed |
| trend micro portalprotect | = 1.2 | No fix listed |
| trend micro scanmail | = 1.0.0 | No fix listed |
| trend micro scanmail | = 2.6 | No fix listed |
| trend micro scanmail | = 2.51 | No fix listed |
| trend micro scanmail | = 3.8 | No fix listed |
| trend micro scanmail | = 3.81 | No fix listed |
| trend micro scanmail | = 6.1 | No fix listed |
| trend micro scanmail | = gold | No fix listed |
| trend micro scanmail emanager | All versions | No fix listed |
| trend micro scanning engine | = 7.1.0 | No fix listed |
| trend micro serverprotect | = 5.3.1 | No fix listed |
| trend micro serverprotect | = 5.5.8 | No fix listed |
| trend micro serverprotect | = 5.58 | No fix listed |
| trend micro serverprotect | = linux | No fix listed |
| trend micro serverprotect | = linux_1.2.0 | No fix listed |
| trend micro serverprotect | = novell_netware | No fix listed |
| trend micro serverprotect | = windows | No fix listed |
| trend micro viruswall | = 3.0.1 | No fix listed |
| trend micro web security suite | = 1.2.0 | No fix listed |
| trend micro webprotect | = 3.1.0 | No fix listed |
References
- esupport.trendmicro.com patch vendor-advisory
- JVN#77366274 third-party-advisory
- 20070208 Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- 33038 vdb-entry
- 24087 patch third-party-advisory vendor-advisory
- 24128 third-party-advisory
- 1017601 patch vdb-entry vendor-advisory
- 1017602 vdb-entry
- 1017603 vdb-entry
- www.jpcert.or.jp
- VU#276432 third-party-advisory us-government-resource
- 22449 patch vdb-entry vendor-advisory
- ADV-2007-0522 vdb-entry
- ADV-2007-0569 vdb-entry
- antivirus-upx-bo(32352) vdb-entry