Unscored severity · published Jan 21, 2009
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Internet Security 2007 · Trend Micro
All versions, or not specified · source: NVD
IS
Internet Security 2008 · Trend Micro
17.0.1224 · source: NVD
OF
Officescan · Trend Micro
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3864
Vendor Advisory
http://secunia.com/advisories/31160
Patch
http://secunia.com/advisories/33609
secunia.com
http://secunia.com/secunia_research/2008-42/
securityreason.com
http://securityreason.com/securityalert/4937
www.securityfocus.com
http://www.securityfocus.com/archive/1/500195/100/0/threaded
Patch
http://www.securityfocus.com/bid/33358
More from Internet Security 2007
–
CVE-2008-3866
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet…
–
CVE-2008-3865
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend…