CVE-2008-2437

CVE-2008-2437 describes a stack-based buffer overflow in Trend Micro OfficeScan components (cgiRecvFile.exe) that can be triggered by an HTTP request with a long ComputerName parameter. The condition allows remote attackers to execute arbitrary code with SYSTEM-level privileges on affected system...

CVE-2007-0856

CVE-2007-0856 concerns Trend Micro’s Anti-Rootkit Common Module (TmComm.sys) where the DOS device interface "\.\TmComm" insecurely permits writes to the Everyone group. This can grant local users access to privileged IOCTLs and may allow execution of code or overwriting memory in kernel context, ...

CVE-2007-0325

CVE-2007-0325 is a remote buffer overflow in Trend Micro OfficeScan’s Web-Deployment SetupINICtrl ActiveX control (OfficeScanSetupINI.dll, SetupINICtrl) used by OfficeScan Web deployment. The flaw affects OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client/Server/Messag...