CVE-2011-5001 Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attack...
HighCVSS 10.0
EPSS 63.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro control manager | <= 5.5 | No fix listed |
References
- 47114 third-party-advisory vendor-advisory
- 20111207 ZDI-11-345 : TrendMicro Control Manager CmdProcessor.exe AddTask Remote Code Execution Vulnerability mailing-list
- 1026390 vdb-entry
- www.trendmicro.com vendor-advisory
- www.zerodayinitiative.com
- cm-cgenericscheduleraddtask-bo(71681) vdb-entry