Back to Database
Status published
Critical
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and...
Vulnerability Description
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0851
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1017601
- http://www.securityfocus.com/bid/22449
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
- http://securitytracker.com/id?1017603
- http://www.jpcert.or.jp/at/2007/at070004.txt
- http://secunia.com/advisories/24087
- http://osvdb.org/33038
- http://www.vupen.com/english/advisories/2007/0522
- http://jvn.jp/jp/JVN%2377366274/index.html
- http://www.kb.cert.org/vuls/id/276432
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32352
- http://www.vupen.com/english/advisories/2007/0569
- http://securitytracker.com/id?1017602
- http://secunia.com/advisories/24128
More from trend micro
View All →CVE-2016-5840
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8...
High
7.2
CVE-2016-3664
Trend Micro Mobile Security for iOS before 3.2.1188 does not...
High
7.4
CVE-2015-3326
Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot...
Medium
5
CVE-2012-2998
SQL injection vulnerability in the ad hoc query module in...
High
7.5
CVE-2011-5001
Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in...
Critical
10
Affected Vendor
trend micro
View all reports →Affected Software
client-server-messaging suite smb, client-server suite smb, control manager, interscan emanager, interscan messaging security suite, interscan viruswall, interscan viruswall for windows nt, interscan viruswall scan engine, interscan web security suite, interscan webmanager, interscan webprotect, officescan, pc-cillin, pc-cillin internet security, pc cillin - internet security 2006, portalprotect, scanmail, scanmail emanager, scanning engine, serverprotect, viruswall, web security suite, webprotect
Vulnerable Versions:
gold, 2.5.0, 3.5, netware, 3.5.2, 3.6, 3.51, 3.51_j, 3.81, 5.5, 5.5_build_1183, 3.0.1, 3.1.0, 3.2.3, 3.3, 3.6.0_build_1182, 3.6.0_build1166, 3.6.5, 3.7.0, 3.7.0_build1190, 3.8.0_build1130, 3.32, 5.1, 3.4, 3.52, 3.52_build1466, 5.1.0, 7.510.0-1002, 1.2, 2.0, 2.1, 3.0, 4.5.0, 7.3, corporate_3.0, corporate_3.1.1, corporate_3.5, corporate_3.11, corporate_3.13, corporate_3.54, corporate_5.02, corporate_5.5, corporate_5.58, corporate_6.5, corporate_7.0, corporate_7.3, 6.0, 2000, 2002, 2003, 2005, 2006, 14_14.00.1485, 2005_12.0.0_0_build_1244, 2006_14.10.0.1023, 2007, 1.0, 1.0.0, 2.6, 2.51, 3.8, 6.1, 7.1.0, 5.3.1, 5.5.8, 5.58, linux, linux_1.2.0, novell_netware, windows, 1.2.0
Timeline
Official Publish:
February 8th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.