Vulnerability in Trend Micro Client-Server-Messaging Suite SMB
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
EPSS: 0.084 (94.6th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Client-server-messaging_suite_smb — versions gold
- Trend_micro Client-server_suite_smb — versions gold
- Trend_micro Control_manager — versions 2.5.0, 3.5, gold
- Trend_micro Interscan_emanager — versions 3.5, 3.5.2, 3.6
- Trend_micro Interscan_messaging_security_suite — versions 3.81, 5.5, 5.5_build_1183
- Trend_micro Interscan_viruswall — versions 3.0.1, 3.1.0, 3.2.3
- Trend_micro Interscan_viruswall_for_windows_nt — versions 3.4, 3.5, 3.6
- Trend_micro Interscan_viruswall_scan_engine — versions 7.510.0-1002
- Trend_micro Interscan_webmanager — versions 1.2, 2.0, 2.1
- Trend_micro Interscan_webprotect — versions gold
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_JVN, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)