PT-2010-2321 · Trend Micro · Trend Micro Url Filtering Engine+2

Publicado 2010-02-09 · Atualizado 2017-08-17 · CVE-2010-0564

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 8.0 through 8.0 before SP1 Patch 5 - Build 3510 Trend Micro OfficeScan version 10.0 with tmufeng.dll before 2.0.0.1049 Trend Micro OfficeScan with tmufeng.dll before 3.0.0.1029

Description The issue is a buffer overflow in the Trend Micro URL Filtering Engine (TMUFE) that allows attackers to cause a denial of service, resulting in a crash or hang of OfficeScan, via unspecified vectors.

Recommendations For Trend Micro OfficeScan versions 8.0 through 8.0 before SP1 Patch 5 - Build 3510, update to SP1 Patch 5 - Build 3510 or later. For Trend Micro OfficeScan version 10.0 with tmufeng.dll before 2.0.0.1049, update tmufeng.dll to version 2.0.0.1049 or later. For Trend Micro OfficeScan with tmufeng.dll before 3.0.0.1029, update tmufeng.dll to version 3.0.0.1029 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0564

Produtos afetados

Officescan

Trend Micro Officescan Server

Trend Micro Url Filtering Engine

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/56097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0564 · Nota de Segurança
• http://vupen.com/english/advisories/2010/0295 · Aviso do Fabricante
• http://trendmicro.com/ftp/documentation/readme/OSCE_80_Win_SP1_Patch_5_en_readme.txt · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0564 · Nota
• http://secunia.com/advisories/38396 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/56097 · Nota
• http://securitytracker.com/id?1023553 · Nota
• http://trendmicro.com/ftp/documentation/readme/readme_1224.txt · Nota
• http://securityfocus.com/bid/38083 · Nota