10

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trend Micro ≫ Internet Security 2008 Version17.0.1224
Trend Micro ≫ Officescan Version8.0 Updatesp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.43% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31160
Vendor Advisory
http://secunia.com/advisories/33609
Vendor Advisory
http://secunia.com/secunia_research/2008-42/
Vendor Advisory
http://securityreason.com/securityalert/4937
http://www.securityfocus.com/archive/1/500195/100/0/threaded
http://www.securityfocus.com/bid/33358
Patch
http://www.securitytracker.com/id?1021614
http://www.securitytracker.com/id?1021615
http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0191
https://exchange.xforce.ibmcloud.com/vulnerabilities/48107