Unscored severity · published Feb 10, 2010
CVE-2010-0564
Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors. NOTE: it is likely that this issue also affects tmufeng.dll before 2.0.0.1049 for OfficeScan 10.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trendmicro
through 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0564
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0564
Vendor Advisory
http://secunia.com/advisories/38396
www.securityfocus.com
http://www.securityfocus.com/bid/38083
www.securitytracker.com
http://www.securitytracker.com/id?1023553
www.trendmicro.com
http://www.trendmicro.com/ftp/documentation/readme/OSCE_80_Win_SP1_Patch_5_en_readme.txt
www.trendmicro.com
http://www.trendmicro.com/ftp/documentation/readme/readme_1224.txt
Patch
http://www.vupen.com/english/advisories/2010/0295
More from Officescan
9.8
CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
8.8
CVE-2021-36741
Trend Micro Multiple Products Improper Input Validation Vulnerability
8.8
CVE-2020-8467
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
8.8
CVE-2020-8468
Trend Micro Multiple Products Content Validation Escape Vulnerability
7.8
CVE-2021-36742
Trend Micro Multiple Products Improper Input Validation Vulnerability