Unscored severity · published Feb 8, 2007
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows…
–
CVSS
8.4%
EPSS
No
On KEV
Description
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client-server Suite Smb · Trend Micro
gold · source: NVD
CS
Client-server-messaging Suite Smb · Trend Micro
gold · source: NVD
CM
Control Manager · Trend Micro
2.5.0; 3.5; gold; gold; gold; gold; +2 more · source: NVD
IE
Interscan Emanager · Trend Micro
3.5; 3.5.2; 3.6; 3.6; 3.51; 3.51_j · source: NVD
IM
Interscan Messaging Security Suite · Trend Micro
3.81; 5.5; 5.5_build_1183; gold; gold; gold · source: NVD
IV
Interscan Viruswall · Trend Micro
3.0.1; 3.0.1; 3.1.0; 3.2.3; 3.3; 3.6; +17 more · source: NVD
IV
Interscan Viruswall For Windows NT · Trend Micro
3.4; 3.5; 3.6; 3.51; 3.52; 3.52_build1466; +1 more · source: NVD
IV
Interscan Viruswall Scan Engine · Trend Micro
7.510.0-1002 · source: NVD
IW
Interscan Web Security Suite · Trend Micro
gold; gold; gold · source: NVD
IW
Interscan Webmanager · Trend Micro
1.2; 2.0; 2.1 · source: NVD
IW
Interscan Webprotect · Trend Micro
gold · source: NVD
OF
Officescan · Trend Micro
3.0; 4.5.0; 7.3; corporate_3.0; corporate_3.1.1; corporate_3.5; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0851
Patch
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
jvn.jp
http://jvn.jp/jp/JVN%2377366274/index.html
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
osvdb.org
http://osvdb.org/33038
Patch
http://secunia.com/advisories/24087
secunia.com
http://secunia.com/advisories/24128
More from Client-server Suite Smb
–
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a…