CVE-2010-0564

Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...

CVE-2010-0564

CVE-2010-0564 describes a buffer overflow in Trend Micro OfficeScan URL Filtering Engine (TMUFE). Affected product: OfficeScan 8.0 before SP1 Patch 5 (Build 3510); possibly tmufeng.dll before 3.0.0.1029, with note that tmufeng.dll before 2.0.0.1049 may affect OfficeScan 10.0. Impact: denial of se...

CVE-2010-0564

Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...

Trend Micro Web-Deployment - ActiveX Remote Execution

Trend Micro Web-Deployment - ActiveX Remote Execution Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download:...

Trend Micro Web-Deployment - ActiveX Remote Execution

Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11173.zip...

Trend Micro OfficeScan Multiple CGI Modules Form Processing Buffer Overflow (CVE-2008-3862)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on nodes of an enterprise network. The product is a central command center for...

Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)

The Trend Micro Control Manager product is a centralized outbreak management console. It is meant to consolidate the coordination of outbreak security actions and the management of Trend Micro products and services. The product is a central command center for management of infections or...

Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Trend Micro...

Trend Micro ServerProtect 5.58 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Trend Micro...

Trend Micro OfficeScan Remote Stack Overflow

require 'msf/core' require 'metasm' class Metasploit3 'Trend Micro OfficeScan Remote Stack Overflow', 'Description' = %q This module exploits a stack overflow in Trend Micro OfficeScan cgiChkMasterPwd.exe running with SYSTEM privileges. , 'Author' = 'toto' , 'License' = MSFLICENSE, 'Version' =...

Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Trend Micro...

Trend Micro OfficeScan CGI Password Decryption Buffer Overflow (CVE-2008-1365)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

Google Reader Used in Koobface Attack

The attackers behind the insidious Koobface worm have taken to using Google Reader accounts that they control to spread the worm through shared Reader items. The infection method–which has been used before by Facebook worms–is another indication of the resilience and changing tactics the malware...

Trend Micro OfficeScan Atxconsole ActiveX Control Format String (CVE-2006-5157)

The Trend Micro OfficeScan product is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central...

Trend Micro ServerProtect TMregChange Stack Overflow (CVE-2007-4731)

Trend Micro ServerProtect offers anti-virus scanning for servers, detecting and removing viruses from files and compressed files. The product provides centralized control over a Windows-based management console for control of virus outbreaks, virus scanning, virus pattern file updates,...

Skype 'Online Notification' Alert Leads to Fake AV

Trend Micro researcher Rik Ferguson has discovered a new twist on the old social engineering attacks on Skype — the use of usernames and monikers that appear very, very convincing. In the latest attacks, which lure computer users to fake anti-virus sites rogueware, the attackers are using the...

Trend Micro OfficeScan Server cgiRecvFile Buffer Overflow (CVE-2008-2437)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on nodes of an enterprise network. The product is a central command centre for...

Gaming Mouse-Maker Razer Hit With Infected Firmware

Gamers trying to update their mouse or keyboard drivers from accessory maker Razer USA’s Web site recently may have gotten more than they bargained for. According to the IDG News Service, the company’s computers appear to have been hacked, and its support site used to spread malicious Trojan hors...

Rogue Advertisement Pushes Scareware to NYTimes.com Readers

For about 24 hours over the weekend, The New York Times site was serving up fake security software scareware. In a message posted to Twitter and a note on its NYTimes.com site, the newspaper blamed a rogue advertisement for the malware blast: Some nasty ads have hit the Web browsers of visitors t...

Firefox Add-on Spies on Google Search Results

Security researchers have intercepted a fake Flash Player update creating a Firefox add-on that spies on the user’s Google search results. The malicious Firefox extension, called “Adobe Flash Player 0.2,” injects ads into the user’s Google search results pages and even has the capability to monit...