趋势科技Internet Security Pro 2010 UfPBCtrl.dll远程代码执行漏洞

趋势科技的Internet Security是一套可适合保护家庭用户多台计算机的网络安全产品。 Internet Security所安装的UfPBCtrl.dll ActiveX控件没有正确地处理传送给extSetOwner函数的调用参数。该函数假设调用参数为已初始化的指针，如果攻击者指定了无效的地址，就可以强制进程调用受控的内存区域，导致执行任意代码。 Trend Micro Internet Security Pro 2010 厂商补丁： Trend Micro ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Trend Micro Internet Security ActiveX code execution

Code execution via extSetOwner...

ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability

ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-165 August 25, 2010 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Internet...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

This module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX. When sending an invalid pointer to the extSetOwner function of UfPBCtrl.dll an attacker may be able to execute arbitrary code. Module Options msf use...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Internet Security Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

Interscan Web Security 5.0 - Persistent Cross-Site Scripting

Interscan Web Security 5.0 - Persistent Cross-Site Scripting Exploit Title: Permanent XSS in InterScan Web Security Virtual Appliance 5.0 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249&regs=NABU&langloc=1 Version: 5.0 Tested on: Red Hat Nash...

InterScan Web Security Virtual Appliance本地权限提升和任意文件上传/下载漏洞

BUGTRAQ ID: 41072 InterScan Web Security Virtual Appliance是一款能安装在VMware平台上的网页过滤产品。 InterScan Web Security Virtual Appliance没有正确地过滤提交给/servlet/com.trend.iwss.gui.servlet.exportreport的 exportname"参数和提交给/servlet/com.trend.iwss.gui.servlet.ConfigBackup的 pkgname参数，远程攻击者可以通过目录遍历攻击从系统下载任意文件。 InterScan W...

Wing FTP Server PORT Command DoS Vulnerability

Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...

Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download

Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249&regs=NABU?loc=1 Version: 5.0 Tested on: Red Hat Nash 5.1 Vulnerability Description: The...

Trend Micro Interscan Web Security Virtual Appliance - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/41072/info Trend Micro InterScan Web Security Virtual Appliance is prone to multiple vulnerabilities. Exploiting these issues can allow an attacker to download or upload arbitrary files to the system. This may aid in further attacks. Firmware versions pri...

Trend Micro OfficeScan - Remote Stack Buffer Overflow (Metasploit)

$Id: trendmicroofficescan.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro OfficeScan - Client ActiveX Control Buffer Overflow (Metasploit)

$Id: trendmicroofficescan.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)

$Id: trendmicroserverprotectcreatebinding.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)

$Id: trendmicroserverprotectearthagent.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro ServerProtect 5.58 - Remote Buffer Overflow (Metasploit)

$Id: trendmicroserverprotect.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro Products AntiVirus Library Buffer Overflow (CVE-2005-0533)

TrendMicro provides several anti-virus AV scanning products for home use as well as gateway AV scanners. The AV scanner product line has the ability to decode several archived file formats when scanning file contents for viruses. All scanner products are based on scanning engines implemented as...

Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability

Trend Micro OfficeScan is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability

This host has Trend Micro OfficeScan running which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanurlfiltbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability Authors: Veerendra ...

Buffer overflow

Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...