PT-2009-1214 · Trend Micro · Trend Micro Officescan+2

Publicado

2009-01-21

·

Atualizado

2018-10-11

·

CVE-2008-3865

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan version 8.0 SP1 Patch 1 Trend Micro Internet Security versions 2007 and 2008 17.0.1224
Description The issue is related to multiple heap-based buffer overflows in the ApiThread function within the firewall service of Trend Micro Network Security Component modules. This allows remote attackers to execute arbitrary code by sending a packet with a small value in an unspecified size field.
Recommendations For Trend Micro OfficeScan version 8.0 SP1 Patch 1, update to a version that includes a fix for the buffer overflow issue in the ApiThread function. For Trend Micro Internet Security versions 2007 and 2008 17.0.1224, update to a version that includes a fix for the buffer overflow issue in the ApiThread function.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-3865

Produtos afetados

Trend Micro Internet Security
Trend Micro Home Network Security
Trend Micro Officescan