PT-2009-1213 · Trend Micro · Trend Micro Officescan+2

Published 2009-01-21 · Updated 2018-10-11 · CVE-2008-3864

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan version 8.0 SP1 Patch 1 Trend Micro Internet Security versions 2007 and 2008 17.0.1224

Description The issue concerns the ApiThread function in the firewall service of Trend Micro Network Security Component modules. It allows remote attackers to cause a denial of service by crashing the service with a packet containing a large value in an unspecified size field.

Recommendations For Trend Micro OfficeScan version 8.0 SP1 Patch 1, consider disabling the ApiThread function in the firewall service as a temporary workaround until a patch is available. For Trend Micro Internet Security versions 2007 and 2008 17.0.1224, restrict access to the firewall service to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-3864

Affected Products

Trend Micro Internet Security

Trend Micro Home Network Security

Trend Micro Officescan

References · 13

• http://secunia.com/advisories/31160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3864 · Security Note
• http://secunia.com/advisories/33609 · Vendor Advisory
• http://securityfocus.com/bid/33358 · Patch
• http://trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt · Vendor Advisory
• http://securitytracker.com/id?1021614 · Note
• http://securityfocus.com/archive/1/500195/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3864 · Note
• http://securityreason.com/securityalert/4937 · Note
• http://securitytracker.com/id?1021615 · Note
• http://vupen.com/english/advisories/2009/0191 · Note
• http://secunia.com/secunia_research/2008-42 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48106 · Note