CVE-2006-6178

CVE-2006-6178 – Details : A buffer overflow in Trend Micro OfficeScan 7.3 (prior to build 7.3.0.1087) affects the PCCSRV/Web_console/RemoteInstallCGI/Wizard.exe, enabling a remote attacker to execute arbitrary code via unknown attack vectors. The NVD entry (CVSS v2 base score 7.5, HIGH) confirms ...

Trend Micro OfficeScan ATXCONSOLE.OCX ActiveX控件格式串处理漏洞

Trend Micro OfficeScan是一种针对整个网段的分布式杀毒软件。 Trend Micro OfficeScan企业版的管理控制台ActiveX控件ATXCONSOLE.OCX没有正确地处理格式串，返回给管理控制台的远程客户端安装名称搜索的特制格式串可能允许访问进程栈。如果成功利用的话，这可能允许用户在运行ActiveX管理控制台的系统上执行任意代码。 Trend Micro OfficeScan Corporate Edition 7.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Trend Micro OfficeScan Management Console ActiveX control format string vulnerability

Overview The Trend Micro OfficeScan Management Console ActiveX control, AtxConsole, contains a format string vulnerability. This vulnerability may be exploited by an attacker to execute arbitrary code, or create a denial-of-service condition. Description Trend Micro's OfficeScan product includes ...

CVE-2006-5212

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-5211

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...

CVE-2006-5212

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-5211

Trend Micro OfficeScan 6.0 CSM Suite for SMB 2.0 (before 6.0.0.1385) and OfficeScan Corporate Edition 6.5 (before 6.5.0.1418), 7.0 (before 7.0.0.1257), and 7.3 (before 7.3.0.1053) are affected. A vulnerability in the OfficeScan CGI program can be triggered via a specific HTTP request to remove Of...

CVE-2006-5211

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...

CVE-2006-5212

CVE-2006-5212 affects Trend Micro OfficeScan in multiple editions: OfficeScan 6.0 CSM SMB 2.0 before 6.0.0.1385; OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418; OfficeScan 7.0 before 7.0.0.1257; and OfficeScan 7.3 before 7.3.0.1053. The vulnerability allows a remote attacker to delete ...

CVE-2006-5157

Format string vulnerability in the ActiveX control ATXCONSOLE.OCX in TrendMicro OfficeScan Corporate Edition OSCE before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remote Client Install name search"...

Trend Micro OfficeScan Client directory traversal

Directory traversal in embedded HTTP server...

CVE-2006-5157

Format string vulnerability in the ActiveX control ATXCONSOLE.OCX in TrendMicro OfficeScan Corporate Edition OSCE before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remote Client Install name search"...

CVE-2006-5157

Vulnerability summary (CVE-2006-5157): Trend Micro OfficeScan Corporate Edition (OSCE) prior to 7.3 Patch 1 contains a format-string flaw in the ATXCONSOLE.OCX ActiveX control (Management Console) that can allow remote code execution via crafted input in the remote client install name search, whe...

[Full-disclosure] Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability

================================================== Layered Defense Research Advisory 1 October 2006 ================================================== 1 Affected Software TrendMicro OfficeScan Corporate Edition 7.3 ================================================== 2 Severity Rating: Medium risk...

TrendMicro OfficeScan ActiveX format string

Format string vulnerability in ATXCONSOLE.OCX control library...

Trend Micro OfficeScan 7.3 Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server. This version of OfficeScan is vulnerable to multiple stack overflows in CGI programs that could allow a remote attacker to execute code in the context of the remote server. Note that OfficeScan server under Windows runs with...

Trend Micro OfficeScan Client Version

Binary data officescanversion.nbin...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

Code injection

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...