Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0851

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

Published

2007-02-08T18:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	trend_micro	client-server-messaging_suite_smb	gold	Yes
Application	trend_micro	client-server_suite_smb	gold	Yes
Application	trend_micro	control_manager	2.5.0	Yes
Application	trend_micro	control_manager	3.5	Yes
Application	trend_micro	control_manager	gold	Yes
Application	trend_micro	control_manager	gold	Yes
Application	trend_micro	control_manager	gold	Yes
Application	trend_micro	control_manager	gold	Yes
Application	trend_micro	control_manager	gold	Yes
Application	trend_micro	control_manager	netware	Yes
Application	trend_micro	interscan_emanager	3.5	Yes
Application	trend_micro	interscan_emanager	3.5.2	Yes
Application	trend_micro	interscan_emanager	3.6	Yes
Application	trend_micro	interscan_emanager	3.6	Yes
Application	trend_micro	interscan_emanager	3.51	Yes
Application	trend_micro	interscan_emanager	3.51_j	Yes
Application	trend_micro	interscan_messaging_security_suite	*	Yes
Application	trend_micro	interscan_messaging_security_suite	3.81	Yes
Application	trend_micro	interscan_messaging_security_suite	5.5	Yes
Application	trend_micro	interscan_messaging_security_suite	5.5_build_1183	Yes
Application	trend_micro	interscan_messaging_security_suite	gold	Yes
Application	trend_micro	interscan_messaging_security_suite	gold	Yes
Application	trend_micro	interscan_messaging_security_suite	gold	Yes
Application	trend_micro	interscan_viruswall	3.0.1	Yes
Application	trend_micro	interscan_viruswall	3.0.1	Yes
Application	trend_micro	interscan_viruswall	3.1.0	Yes
Application	trend_micro	interscan_viruswall	3.2.3	Yes
Application	trend_micro	interscan_viruswall	3.3	Yes
Application	trend_micro	interscan_viruswall	3.6	Yes
Application	trend_micro	interscan_viruswall	3.6	Yes
Application	trend_micro	interscan_viruswall	3.6	Yes
Application	trend_micro	interscan_viruswall	3.6	Yes
Application	trend_micro	interscan_viruswall	3.6.0_build_1182	Yes
Application	trend_micro	interscan_viruswall	3.6.0_build1166	Yes
Application	trend_micro	interscan_viruswall	3.6.5	Yes
Application	trend_micro	interscan_viruswall	3.7.0	Yes
Application	trend_micro	interscan_viruswall	3.7.0_build1190	Yes
Application	trend_micro	interscan_viruswall	3.8.0_build1130	Yes
Application	trend_micro	interscan_viruswall	3.32	Yes
Application	trend_micro	interscan_viruswall	3.81	Yes
Application	trend_micro	interscan_viruswall	5.1	Yes
Application	trend_micro	interscan_viruswall	gold	Yes
Application	trend_micro	interscan_viruswall	gold	Yes
Application	trend_micro	interscan_viruswall	gold	Yes
Application	trend_micro	interscan_viruswall	gold	Yes
Application	trend_micro	interscan_viruswall	gold	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.4	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.5	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.6	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.51	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.52	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	3.52_build1466	Yes
Application	trend_micro	interscan_viruswall_for_windows_nt	5.1.0	Yes
Application	trend_micro	interscan_viruswall_scan_engine	7.510.0-1002	Yes
Application	trend_micro	interscan_web_security_suite	*	Yes
Application	trend_micro	interscan_web_security_suite	*	Yes
Application	trend_micro	interscan_web_security_suite	gold	Yes
Application	trend_micro	interscan_web_security_suite	gold	Yes
Application	trend_micro	interscan_web_security_suite	gold	Yes
Application	trend_micro	interscan_webmanager	1.2	Yes
Application	trend_micro	interscan_webmanager	2.0	Yes
Application	trend_micro	interscan_webmanager	2.1	Yes
Application	trend_micro	interscan_webprotect	gold	Yes
Application	trend_micro	officescan	3.0	Yes
Application	trend_micro	officescan	4.5.0	Yes
Application	trend_micro	officescan	7.3	Yes
Application	trend_micro	officescan	corporate_3.0	Yes
Application	trend_micro	officescan	corporate_3.1.1	Yes
Application	trend_micro	officescan	corporate_3.5	Yes
Application	trend_micro	officescan	corporate_3.5	Yes
Application	trend_micro	officescan	corporate_3.11	Yes
Application	trend_micro	officescan	corporate_3.11	Yes
Application	trend_micro	officescan	corporate_3.13	Yes
Application	trend_micro	officescan	corporate_3.13	Yes
Application	trend_micro	officescan	corporate_3.54	Yes
Application	trend_micro	officescan	corporate_5.02	Yes
Application	trend_micro	officescan	corporate_5.5	Yes
Application	trend_micro	officescan	corporate_5.58	Yes
Application	trend_micro	officescan	corporate_6.5	Yes
Application	trend_micro	officescan	corporate_7.0	Yes
Application	trend_micro	officescan	corporate_7.3	Yes
Application	trend_micro	pc-cillin	6.0	Yes
Application	trend_micro	pc-cillin	2000	Yes
Application	trend_micro	pc-cillin	2002	Yes
Application	trend_micro	pc-cillin	2003	Yes
Application	trend_micro	pc-cillin	2005	Yes
Application	trend_micro	pc-cillin	2006	Yes
Application	trend_micro	pc-cillin_internet_security	14_14.00.1485	Yes
Application	trend_micro	pc-cillin_internet_security	2005_12.0.0_0_build_1244	Yes
Application	trend_micro	pc-cillin_internet_security	2006_14.10.0.1023	Yes
Application	trend_micro	pc-cillin_internet_security	2007	Yes
Application	trend_micro	pc_cillin_-_internet_security_2006	*	Yes
Application	trend_micro	portalprotect	1.0	Yes
Application	trend_micro	portalprotect	1.2	Yes
Application	trend_micro	scanmail	1.0.0	Yes
Application	trend_micro	scanmail	2.6	Yes
Application	trend_micro	scanmail	2.51	Yes
Application	trend_micro	scanmail	3.8	Yes
Application	trend_micro	scanmail	3.81	Yes
Application	trend_micro	scanmail	6.1	Yes
Application	trend_micro	scanmail	gold	Yes
Application	trend_micro	scanmail	gold	Yes
Application	trend_micro	scanmail	gold	Yes
Application	trend_micro	scanmail	gold	Yes
Application	trend_micro	scanmail	gold	Yes
Application	trend_micro	scanmail_emanager	*	Yes
Application	trend_micro	scanning_engine	7.1.0	Yes
Application	trend_micro	serverprotect	5.3.1	Yes
Application	trend_micro	serverprotect	5.5.8	Yes
Application	trend_micro	serverprotect	5.58	Yes
Application	trend_micro	serverprotect	5.58	Yes
Application	trend_micro	serverprotect	linux	Yes
Application	trend_micro	serverprotect	linux_1.2.0	Yes
Application	trend_micro	serverprotect	novell_netware	Yes
Application	trend_micro	serverprotect	windows	Yes
Application	trend_micro	viruswall	3.0.1	Yes
Application	trend_micro	web_security_suite	1.2.0	Yes
Application	trend_micro	webprotect	3.1.0	Yes

References

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289 Patch, Vendor Advisory ([email protected])
http://jvn.jp/jp/JVN%2377366274/index.html ([email protected])
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470 Patch, Vendor Advisory ([email protected])
http://osvdb.org/33038 ([email protected])
http://secunia.com/advisories/24087 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/24128 ([email protected])
http://securitytracker.com/id?1017601 Patch, Vendor Advisory ([email protected])
http://securitytracker.com/id?1017602 ([email protected])
http://securitytracker.com/id?1017603 ([email protected])
http://www.jpcert.or.jp/at/2007/at070004.txt ([email protected])
http://www.kb.cert.org/vuls/id/276432 US Government Resource ([email protected])
http://www.securityfocus.com/bid/22449 Patch, Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2007/0522 ([email protected])
http://www.vupen.com/english/advisories/2007/0569 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/32352 ([email protected])
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://jvn.jp/jp/JVN%2377366274/index.html (af854a3a-2127-422b-91ae-364da2661108)
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/33038 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24087 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24128 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017601 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017602 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017603 (af854a3a-2127-422b-91ae-364da2661108)
http://www.jpcert.or.jp/at/2007/at070004.txt (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/276432 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/22449 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0522 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0569 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/32352 (af854a3a-2127-422b-91ae-364da2661108)