CVE-2007-0851 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Micro Client-server-messaging Suite SMB

3 documents3 sources

Severity

9.3CRITICALNVD

EPSS

35.2%

top 2.95%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Trend Micro Client-server-messaging Suite SMB Trend Micro Client-server Suite SMB Trend Micro Control Manager +18 more

Timeline

PublishedFeb 8

Latest updateMay 1

Description

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages20 packages

▶NVDtrend_micro/interscan_viruswall_scan_engine7.510.0-1002

▶NVDtrend_micro/scanning_engine7.1.0

▶NVDtrend_micro/interscan_viruswall21 versions+20

▶NVDtrend_micro/scanmail7 versions+6

▶NVDtrend_micro/viruswall3.0.1

Patches

Patch: esupport.trendmicro.com ↗Patch: labs.idefense.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

GHSA

GHSA-h2w9-3qj3-7rf9: Buffer overflow in the Trend Micro Scan Engine 8↗2022-05-01

▶

CVEList

CVE-2007-0851: Buffer overflow in the Trend Micro Scan Engine 8↗2007-02-08

▶