8615 matches found
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center CCC Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable...
Trend Micro病毒扫描引擎TMComm本地权限提升漏洞
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro的病毒扫描引擎中所捆绑的TmComm.sys驱动没有对\.\TmComm DOS设备接口设置安全的权限，对Everyone给予了写权限。这允许本地登录的用户通过IOCTL访问仅应由特权用户才能访问的功能。 此外，这个DOS设备接口的IOCTL处理器没有验证对其传送的地址，允许在内核（RING 0）环境中覆盖任意内存或执行任意指令。 Trend Micro PC-cillin Internet Security 2007 Trend Micro Antivirus 2007 Trend Micro...
CVE-2007-0851: Undefined Security Weakness
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center CCC Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable...
CVE-2007-0856: Undefined Security Weakness
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module RCM, with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client...
iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability
Trend Micro TmComm Local Privilege Escalation Vulnerability iDefense Security Advisory 02.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine is widely relied upon to provide AntiVirus capabilities to desktop, server, and...
Trend Micro扫描引擎UPX压缩PE文件缓冲区溢出漏洞
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro的病毒扫描引擎在扫描特制的畸形UPX压缩可执行程序时没有正确验证输入，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果用户扫描了畸形文件的话，就可能触发缓冲区溢出，导致执行任意指令。在Windows下扫描引擎在内核环境中运行；在Linux下扫描引擎运行为超级用户权限的守护程序。因此，成功利用这个漏洞的攻击者可以获得对受影响系统的完全控制。 Trend Micro Scan Engine 8.300 Trend Micro Scan Engine 8.000...
Trend Micro AntiVirus fails to properly process malformed UPX packed executables
Overview The Trend Micro AntiVirus scanning engine contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Trend Micro AntiVirus is a virus scanner for Microsoft Windows and Linux. The Trend Micro virus scanning...
Microsoft Windows Mobile多个远程拒绝服务漏洞
Windows Mobile是微软开发的移动设备。 Windows Mobile 2003/2003SE和Windows Mobile 5.0 both Smartphone和PocketPC包含的图象和视频应用程序存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 问题是Pictures和Videos应用程序在尝试处理JPEG文件时存在问题，当处理恶意JPEG文件会导致挂起10-15分钟，但是没有任何错误产生，用户不能对设备进行任何操作。导致拒绝服务攻击。 另外对IE的处理也存在堆栈缓冲区溢出，可导致设备重启。 Microsoft Windows Mobile Smartphon...
Buffer overflow
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
CVE-2007-0602
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
CVE-2007-0602
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
CVE-2007-0602
The CVE-2007-0602 entry concerns Trend Micro VirusWall 3.81 for Linux, where a buffer overflow in the VSAPI library (libvsapi.so) used by IScan.BASE/vscan allows local privilege escalation via a long command line argument. The root cause is a memory corruption in the VSAPI component that handles ...
CVE-2007-0602: Undefined Security Weakness
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533...
Trend Micro VirusWall 3.81 (vscan/VSAPI) Local Buffer Overflow Exploit
No description provided by source. / Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description:...
Trend Micro VirusWall 3.81 (vscan/VSAPI) Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ====================================================================== Trend Micro VirusWall 3.81 vscan/VSAPI Local Buffer Overflow Exploit ====================================================================== / Title: Local root exploit for...
Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux
I - TITLE Security advisory: Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux II - SUMMARY Description: Local buffer overflow vulnerability in VSAPI library allows arbitrary code execution and leads to privilege escalation Author: Sebastian Wolfgarten sebastian at wolfgart...
Trend Micro VirusWall 3.81 - vscanVSAPI Local Buffer Overflow
Trend Micro VirusWall 3.81 - vscanVSAPI Local Buffer Overflow / Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description: The product...
Trend Micro VirusWall for Linux buffer overflow
Buffer overflow in libvsapi.so library used by vscan suid root application...
Trend Micro VirusWall 3.81 - 'vscan/VSAPI' Local Buffer Overflow
/ Title: Local root exploit for vscan/VSAPI =Trend Micro VirusWall 3.81 on Linux Author: Sebastian Wolfgarten / [email protected] / http://www.devtarget.org Date: January 3rd, 2007 Severity: Medium Description: The product "InterScan VirusWall 3.81 for Linux" ships a library called...
