OF
Product
OfficeScan
On CISA KEVExploited in the wild
30
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add OfficeScan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18187 In wildKEV | 7.5 | Oct 28 | Trend Micro OfficeScan Directory Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2008-3866 | – | Jan 21 | The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet… Affected: 8.0 |
| CVE-2008-3865 | – | Jan 21 | Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend… Affected: 8.0 |
| CVE-2008-3864 | – | Jan 21 | The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and… Affected: 8.0 |
| CVE-2008-3862 | – | Oct 23 | Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110,… Affected: 7.3; 8.0 |
| CVE-2008-4403 | – | Oct 3 | The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL… Affected: 8.0; 8.0 |
| CVE-2008-4402 | – | Oct 3 | Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute… Affected: 8.0; 8.0 |
| CVE-2008-2439 | – | Oct 3 | Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367… Affected: 7.3; 8.0; 8.0 |
| CVE-2008-2437 | – | Sep 16 | Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security… Affected: 7.0; 7.3; 7.3; 8.0; 8.0 |
| CVE-2008-3364 | – | Jul 30 | Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment 7.0, 7.3 build 1343… Affected: 7.3 |
| CVE-2007-3455 | – | Jun 27 | cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management… Affected: 8.0 |
| CVE-2007-3454 | – | Jun 27 | Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted… Affected: 7.3; 8.0 |
| CVE-2007-0851 | – | Feb 8 | Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows… Affected: 3.0; 4.5.0; 7.3; corporate_3.0; corporate_3.1.1; corporate_3.5; +12 more |
| CVE-2006-6458 | – | Dec 11 | The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server… Affected: 7.3 |
| CVE-2006-6178 | – | Nov 30 | Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via… Affected: 7.3 |
| CVE-2006-6179 | – | Nov 30 | Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary… Affected: 7.3 |
| CVE-2006-5212 | – | Oct 10 | Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before… Affected: 6.0; corporate_6.5; corporate_7.0; corporate_7.3 |
| CVE-2006-5157 | – | Oct 5 | Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote attackers to execute… Affected: corporate_7.3 |
| CVE-2006-1381 | – | Mar 24 | Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying… Affected: 5.5 |
| CVE-2005-3379 | – | Oct 30 | Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to… Affected: 7.0_engine_7.510.1002 |
| CVE-2005-0533 | – | May 2 | Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a… Affected: 3.0; corporate_3.0; corporate_3.1.1; corporate_3.5; corporate_3.5; corporate_3.11; +8 more |
| CVE-2004-2430 | – | Dec 31 | Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to… Affected: 3.0; corporate_3.5; corporate_3.11; corporate_3.13; corporate_3.54; corporate_5.02; +2 more |
| CVE-2004-2006 | – | May 7 | Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus… Affected: 3.0; corporate_3.5; corporate_3.11; corporate_3.13; corporate_3.54; corporate_5.02; +1 more |
| CVE-2003-1341 | – | Dec 31 | The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web… Affected: 3.0; 3.0; 3.1.1; 3.5; 3.5; 3.11; +4 more |
| CVE-2002-1349 | – | Dec 18 | Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3) Affected: corporate_5.02 |
| CVE-2001-1151 | – | Oct 15 | Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication,… Affected: corporate_3.53 |
| CVE-2001-1150 | – | Aug 22 | Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files Affected: corporate_3.5; corporate_3.54 |
| CVE-2000-0205 | – | Mar 3 | Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients Affected: 3.5 |
| CVE-2000-0203 | – | Feb 28 | The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345 Affected: 3.5 |
| CVE-2000-0204 | – | Feb 28 | The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100% Affected: 3.5 |
Showing 30