7528 matches found
Trend Micro扫描引擎UPX压缩PE文件缓冲区溢出漏洞
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro的病毒扫描引擎在扫描特制的畸形UPX压缩可执行程序时没有正确验证输入，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果用户扫描了畸形文件的话，就可能触发缓冲区溢出，导致执行任意指令。在Windows下扫描引擎在内核环境中运行；在Linux下扫描引擎运行为超级用户权限的守护程序。因此，成功利用这个漏洞的攻击者可以获得对受影响系统的完全控制。 Trend Micro Scan Engine 8.300 Trend Micro Scan Engine 8.000...
iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability
Trend Micro TmComm Local Privilege Escalation Vulnerability iDefense Security Advisory 02.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine is widely relied upon to provide AntiVirus capabilities to desktop, server, and...
Trend Micro病毒扫描引擎TMComm本地权限提升漏洞
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro的病毒扫描引擎中所捆绑的TmComm.sys驱动没有对\.\TmComm DOS设备接口设置安全的权限，对Everyone给予了写权限。这允许本地登录的用户通过IOCTL访问仅应由特权用户才能访问的功能。 此外，这个DOS设备接口的IOCTL处理器没有验证对其传送的地址，允许在内核（RING 0）环境中覆盖任意内存或执行任意指令。 Trend Micro PC-cillin Internet Security 2007 Trend Micro Antivirus 2007 Trend Micro...
Microsoft Windows Mobile多个远程拒绝服务漏洞
Windows Mobile是微软开发的移动设备。 Windows Mobile 2003/2003SE和Windows Mobile 5.0 both Smartphone和PocketPC包含的图象和视频应用程序存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 问题是Pictures和Videos应用程序在尝试处理JPEG文件时存在问题，当处理恶意JPEG文件会导致挂起10-15分钟，但是没有任何错误产生，用户不能对设备进行任何操作。导致拒绝服务攻击。 另外对IE的处理也存在堆栈缓冲区溢出，可导致设备重启。 Microsoft Windows Mobile Smartphon...
CVE-2007-0602
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
Buffer overflow
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
CVE-2007-0602
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
CVE-2007-0602
The CVE-2007-0602 entry concerns Trend Micro VirusWall 3.81 for Linux, where a buffer overflow in the VSAPI library (libvsapi.so) used by IScan.BASE/vscan allows local privilege escalation via a long command line argument. The root cause is a memory corruption in the VSAPI component that handles ...
Trend Micro VirusWall 3.81 (vscan/VSAPI) Local Buffer Overflow Exploit
No description provided by source. / Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description:...
Trend Micro VirusWall for Linux buffer overflow
Buffer overflow in libvsapi.so library used by vscan suid root application...
Trend Micro VirusWall 3.81 (vscan/VSAPI) Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ====================================================================== Trend Micro VirusWall 3.81 vscan/VSAPI Local Buffer Overflow Exploit ====================================================================== / Title: Local root exploit for...
Trend Micro VirusWall 3.81 - vscanVSAPI Local Buffer Overflow
Trend Micro VirusWall 3.81 - vscanVSAPI Local Buffer Overflow / Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description: The product...
Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux
I - TITLE Security advisory: Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux II - SUMMARY Description: Local buffer overflow vulnerability in VSAPI library allows arbitrary code execution and leads to privilege escalation Author: Sebastian Wolfgarten sebastian at wolfgart...
Trend Micro VirusWall 3.81 - 'vscan/VSAPI' Local Buffer Overflow
/ Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description: The product "InterScan VirusWall 3.81 for Linux" ships a library called...
Trend Micro InterScan VirusWall Version Detection
Binary data 3892.prm...
CVE-2006-6458
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service CPU consumption and system hang via a malformed RAR...
CVE-2006-6458
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service CPU consumption and system hang via a malformed RAR...
CVE-2006-6458
The CVE-2006-6458 entry affects the Trend Micro scan engine before 8.320 on Windows and before 8.150 on HP-UX/AIX, used in Trend Micro PC Cillin Internet Security 2006, Office Scan 7.3, and Server Protect 5.58. Root cause: processing a malformed RAR archive where the Archive Header head_size and ...
多个Trend Micro Antivirus RAR档远程拒绝服务漏洞
Trend Micro Antivirus是一款商业性质的反病毒程序。 Trend Micro Antivirus处理畸形RAR档存在问题，远程攻击者利用漏洞对应用程序进行拒绝服务攻击。 提交畸形RAR档，其档头字段的headsize和packsize字段数据设置为0，可导致病毒扫描引擎处理时进入无限循环，而使应用程序崩溃，失去检测能力。 Trend Micro Server Protect 5.58 Trend Micro PC Cillin - Internet Security 2006 0 Trend Micro Office Scan 7.3...