Trend Micro PC-cillin 2000/2002/2003 Mail Scanner Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6350/info A buffer overflow vulnerability has been reported for PC-cillin's mail scanning utility. An attacker can exploit this vulnerability by connecting to a vulnerable pop3trap.exe service and sending an overly long...

CVE-2007-4277: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions Everyone:Write for the \.\Tmfilter device, which allows local users to send arbitrary content to the device via the...

CVE-2007-0856: Undefined Security Weakness

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module RCM, with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client...

iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability

Trend Micro TmComm Local Privilege Escalation Vulnerability iDefense Security Advisory 02.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine is widely relied upon to provide AntiVirus capabilities to desktop, server, and...

CVE-2006-6458: Undefined Security Weakness

The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service CPU consumption and system hang via a malformed RAR...

CVE-2006-1379: Undefined Security Weakness

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2005-3360: Undefined Security Weakness

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

CVE-2005-3379: Undefined Security Weakness

Multiple interpretation error in Trend Micro 1 PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and 2 OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated...

Trend Micro PC-cillin 2000/2002/2003 - Mail Scanner Buffer Overflow

source: https://www.securityfocus.com/bid/6350/info A buffer overflow vulnerability has been reported for PC-cillin's mail scanning utility. An attacker can exploit this vulnerability by connecting to a vulnerable pop3trap.exe service and sending an overly long string. This will result in the...

CVE-2000-0007

Technical details for CVE-2000-0007 are not provided in the connected documents. The entry notes a DoS via Trend Micro PC-Cillin proxy port but lacks specifics on affected versions, root cause, mitigation, or fixes; monitor for updates.

CVE-2000-0007: Undefined Security Weakness

Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service...