Code injection

The ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service service crash via a packet with...

CVE-2008-3864

CVE-2008-3864 affects Trend Micro Network Security Component (NSC) firewall modules. The ApiThread() function in the firewall service (TmPfw.exe) processes packets to the default port 40000/TCP and can trigger a heap-based overflow when a size field contains an oversized value, causing a denial o...

CVE-2008-3866

Affected product : Trend Micro OfficeScan NSC components (TmPfw.exe) used in OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007/2008 (17.0.1224). Vulnerability : The Personal Firewall service relies on client-side password protection in the configuration GUI, but this check is not enforced by ...