CVE-2009-1435

CVE-2009-1435 describes a local denial-of-service vulnerability in Trend Micro OfficeScan Client. The issue affects the NTRtScan.exe component on OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1, where an attacker with local access can cause an application crash by crafting directories with long pat...

CVE-2009-1435

NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service application crash via directories with long pathnames. NOTE: some of these details are obtained from third party information...

CVE-2009-1435: Undefined Security Weakness

NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service application crash via directories with long pathnames. NOTE: some of these details are obtained from third party information...

趋势科技OfficeScan客户端拒绝服务漏洞

BUGTRAQ ID: 34642 OfficeScan是一种针对整个网段的分布式杀毒软件。 如果用户使用OfficeScan扫描了包含有超长名称的文件夹的话，就会导致杀毒软件崩溃，具体取决于所使用的字符数。 Trend Micro OfficeScan 8.0 SP1 Trend Micro OfficeScan 8.0 http://marc.info/?l=bugtraq&m=124032947317033&w=2 http://es.geocities.com/jplopezy/officescan.zip...

Trend Micro OfficeScan Client - DOS

Application: Trend Micro OfficeScan Client for Windows 8.0 sp1 OS: Windows XP ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description OfficeScan is a good antivirus that used in man...

Trend Micro OfficeScan DoS

Crash during virus scanning on large number of folders with long names...

Trend Micro OfficeScan 8.0 Client - Denial of Service

Trend Micro OfficeScan 8.0 Client - Denial of Service source: https://www.securityfocus.com/bid/34642/info The Trend Micro OfficeScan Client is prone to a denial-of-service vulnerability because it fails to handle nested directories with excessively long names. Successfully exploits will crash th...

Trend Micro OfficeScan 8.0 Client - Denial of Service

source: https://www.securityfocus.com/bid/34642/info The Trend Micro OfficeScan Client is prone to a denial-of-service vulnerability because it fails to handle nested directories with excessively long names. Successfully exploits will crash the affected application, resulting in a denial-of-servi...

Trend Micro OfficeScan Client Firewall Multiple Vulnerabilities

The remote host is either running Trend Micro OfficeScan or Trend Micro OfficeScan Client. The installed version is affected by multiple vulnerabilities : - A vulnerability in 'ApiThread' function could allow a malicious local user to execute arbitrary code with SYSTEM privileges by sending...

Heap overflow

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

CVE-2008-3865 stems from multiple heap-based buffer overflows in Trend Micro’s Network Security Component (NSC) firewall module, within the ApiThread() function of the firewall service (TmPfw.exe). Affected products include Trend Micro OfficeScan 8.0 SP1 Patch 1 and Trend Micro Internet Security ...

CVE-2008-3864

CVE-2008-3864 affects Trend Micro Network Security Component (NSC) firewall modules. The ApiThread() function in the firewall service (TmPfw.exe) processes packets to the default port 40000/TCP and can trigger a heap-based overflow when a size field contains an oversized value, causing a denial o...

CVE-2008-3864: Improper Input Validation

The ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service service crash via a packet with...

CVE-2008-3866: Improper Authentication

The Trend Micro Personal Firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which...

[Full-disclosure] Secunia Research: Trend Micro NSC Firewall Configuration Vulnerability

====================================================================== Secunia Research 20/01/2009 - Trend Micro Network Security Component - - Firewall Configuration Vulnerability - ====================================================================== Table of Contents Affected...

Update Protection against Trend Micro OfficeScan CGI Parsing Buffer Overflow Vulnerability

A buffer overflow vulnerability was reported in Trend Micro’s OfficeScan. Trend Micro OfficeScan is a centralized virus and security scan management system. The flaw is due to a boundary error when handling HTTP requests. An unauthenticated remote attacker can trigger this vulnerability to inject...

Trend Micro OfficeScan CGI programs POST request buffer overflow

Added: 10/31/2008 CVE: CVE-2008-3862 BID: 31859 OSVDB: 49275 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending specially crafted HTTP POST requests ...

Trend Micro OfficeScan CGI programs POST request buffer overflow

Added: 10/31/2008 CVE: CVE-2008-3862 BID: 31859 OSVDB: 49275 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending specially crafted HTTP POST requests ...