CVE-2008-3864 — Improper Input Validation in Micro Internet Security 2008

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
1.7%
top 17.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro Internet Security 2008Trend Micro Officescan
Timeline
PublishedJan 21
Latest updateMay 2

Description

The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x9vv-ghv6-8pfw: The ApiThread function in the firewall service (aka TmPfw↗2022-05-02
▶
CVEList
CVE-2008-3864: The ApiThread function in the firewall service (aka TmPfw↗2009-01-21
▶
CVE-2008-3864 — Improper Input Validation in Trend | cvebase