Trend Micro OfficeScan client ActiveX control buffer overflow

Added: 02/21/2007 CVE: CVE-2007-0325 BID: 22585 OSVDB: 33040 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem The OfficeScan Web-Deployment SetupINICtrl ActiveX control, which is vulnerable to buffer overflows in multiple methods, is...

CVE-2007-0325

CVE-2007-0325 is a remote buffer overflow in Trend Micro OfficeScan’s Web-Deployment SetupINICtrl ActiveX control (OfficeScanSetupINI.dll, SetupINICtrl) used by OfficeScan Web deployment. The flaw affects OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client/Server/Messag...

CVE-2007-0325: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to...

CVE-2006-6178

CVE-2006-6178 – Details : A buffer overflow in Trend Micro OfficeScan 7.3 (prior to build 7.3.0.1087) affects the PCCSRV/Web_console/RemoteInstallCGI/Wizard.exe, enabling a remote attacker to execute arbitrary code via unknown attack vectors. The NVD entry (CVSS v2 base score 7.5, HIGH) confirms ...

CVE-2006-6179

CVE-2006-6179 affects Trend Micro OfficeScan 7.3 (before 7.3.0.1089). A buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe could allow remote code execution. Impact per sources: remote attacker could run arbitrary code; vulnerability is exploitable over the network with l...

CVE-2006-6179

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6179: Undefined Security Weakness

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6178: Undefined Security Weakness

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-5212

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-5211

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...

CVE-2006-5211: Undefined Security Weakness

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...

CVE-2006-5212: Undefined Security Weakness

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1381: Undefined Security Weakness

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2004-2006: Undefined Security Weakness

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2004-2006

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2003-1341

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation. http://x.x.x.x/officescan/cgi/cgiMasterPwd.exe...

Trend Micro OfficeScan tmlisten.exe Malformed Data Remote DoS

It was possible to kill the Trend Micro OfficeScan antivirus management service by sending an incomplete HTTP request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CVE Status: untested TBD:...