CVE-2008-3864

2009-01-2120:30:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.101

Percentile

94.9%

JSON

The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.

Affected configurations

Nvd

Node

trend_microinternet_security_2007

trend_microinternet_security_2008Match17.0.1224

trend_microofficescanMatch8.0sp1

VendorProductVersionCPE
trend_microinternet_security_2007*cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*
trend_microinternet_security_200817.0.1224cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*
trend_microofficescan8.0cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
trend_micro	internet_security_2007	*	cpe:2.3:a:trend_micro:internet_security_2007::::::::
trend_micro	internet_security_2008	17.0.1224	cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:::::::*
trend_micro	officescan	8.0	cpe:2.3:a:trend_micro:officescan:8.0:sp1::::::