Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Client-server-messaging_suite_smb | Trend_micro | gold (including) | gold (including) |
| Client-server_suite_smb | Trend_micro | gold (including) | gold (including) |
| Control_manager | Trend_micro | 2.5.0 (including) | 2.5.0 (including) |
| Control_manager | Trend_micro | 3.5 (including) | 3.5 (including) |
| Control_manager | Trend_micro | gold (including) | gold (including) |
| Control_manager | Trend_micro | netware (including) | netware (including) |
| Interscan_emanager | Trend_micro | 3.5 (including) | 3.5 (including) |
| Interscan_emanager | Trend_micro | 3.5.2 (including) | 3.5.2 (including) |
| Interscan_emanager | Trend_micro | 3.6 (including) | 3.6 (including) |
| Interscan_emanager | Trend_micro | 3.51 (including) | 3.51 (including) |
| Interscan_emanager | Trend_micro | 3.51_j (including) | 3.51_j (including) |
| Interscan_messaging_security_suite | Trend_micro | * | * |
| Interscan_messaging_security_suite | Trend_micro | 3.81 (including) | 3.81 (including) |
| Interscan_messaging_security_suite | Trend_micro | 5.5 (including) | 5.5 (including) |
| Interscan_messaging_security_suite | Trend_micro | 5.5_build_1183 (including) | 5.5_build_1183 (including) |
| Interscan_messaging_security_suite | Trend_micro | gold (including) | gold (including) |
| Interscan_viruswall | Trend_micro | 3.0.1 (including) | 3.0.1 (including) |
| Interscan_viruswall | Trend_micro | 3.1.0 (including) | 3.1.0 (including) |
| Interscan_viruswall | Trend_micro | 3.2.3 (including) | 3.2.3 (including) |
| Interscan_viruswall | Trend_micro | 3.3 (including) | 3.3 (including) |
| Interscan_viruswall | Trend_micro | 3.6 (including) | 3.6 (including) |
| Interscan_viruswall | Trend_micro | 3.6.0_build_1182 (including) | 3.6.0_build_1182 (including) |
| Interscan_viruswall | Trend_micro | 3.6.0_build1166 (including) | 3.6.0_build1166 (including) |
| Interscan_viruswall | Trend_micro | 3.6.5 (including) | 3.6.5 (including) |
| Interscan_viruswall | Trend_micro | 3.7.0 (including) | 3.7.0 (including) |
| Interscan_viruswall | Trend_micro | 3.7.0_build1190 (including) | 3.7.0_build1190 (including) |
| Interscan_viruswall | Trend_micro | 3.8.0_build1130 (including) | 3.8.0_build1130 (including) |
| Interscan_viruswall | Trend_micro | 3.32 (including) | 3.32 (including) |
| Interscan_viruswall | Trend_micro | 3.81 (including) | 3.81 (including) |
| Interscan_viruswall | Trend_micro | 5.1 (including) | 5.1 (including) |
| Interscan_viruswall | Trend_micro | gold (including) | gold (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.4 (including) | 3.4 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.5 (including) | 3.5 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.6 (including) | 3.6 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.51 (including) | 3.51 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.52 (including) | 3.52 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 3.52_build1466 (including) | 3.52_build1466 (including) |
| Interscan_viruswall_for_windows_nt | Trend_micro | 5.1.0 (including) | 5.1.0 (including) |
| Interscan_viruswall_scan_engine | Trend_micro | 7.510.0-1002 (including) | 7.510.0-1002 (including) |
| Interscan_web_security_suite | Trend_micro | * | * |
| Interscan_web_security_suite | Trend_micro | gold (including) | gold (including) |
| Interscan_webmanager | Trend_micro | 1.2 (including) | 1.2 (including) |
| Interscan_webmanager | Trend_micro | 2.0 (including) | 2.0 (including) |
| Interscan_webmanager | Trend_micro | 2.1 (including) | 2.1 (including) |
| Interscan_webprotect | Trend_micro | gold (including) | gold (including) |
| Officescan | Trend_micro | 3.0 (including) | 3.0 (including) |
| Officescan | Trend_micro | 4.5.0 (including) | 4.5.0 (including) |
| Officescan | Trend_micro | 7.3 (including) | 7.3 (including) |
| Officescan | Trend_micro | corporate_3.0 (including) | corporate_3.0 (including) |
| Officescan | Trend_micro | corporate_3.1.1 (including) | corporate_3.1.1 (including) |
| Officescan | Trend_micro | corporate_3.5 (including) | corporate_3.5 (including) |
| Officescan | Trend_micro | corporate_3.11 (including) | corporate_3.11 (including) |
| Officescan | Trend_micro | corporate_3.13 (including) | corporate_3.13 (including) |
| Officescan | Trend_micro | corporate_3.54 (including) | corporate_3.54 (including) |
| Officescan | Trend_micro | corporate_5.02 (including) | corporate_5.02 (including) |
| Officescan | Trend_micro | corporate_5.5 (including) | corporate_5.5 (including) |
| Officescan | Trend_micro | corporate_5.58 (including) | corporate_5.58 (including) |
| Officescan | Trend_micro | corporate_6.5 (including) | corporate_6.5 (including) |
| Officescan | Trend_micro | corporate_7.0 (including) | corporate_7.0 (including) |
| Officescan | Trend_micro | corporate_7.3 (including) | corporate_7.3 (including) |
| Pc-cillin | Trend_micro | 6.0 (including) | 6.0 (including) |
| Pc-cillin | Trend_micro | 2000 (including) | 2000 (including) |
| Pc-cillin | Trend_micro | 2002 (including) | 2002 (including) |
| Pc-cillin | Trend_micro | 2003 (including) | 2003 (including) |
| Pc-cillin | Trend_micro | 2005 (including) | 2005 (including) |
| Pc-cillin | Trend_micro | 2006 (including) | 2006 (including) |
| Pc-cillin_internet_security | Trend_micro | 14_14.00.1485 (including) | 14_14.00.1485 (including) |
| Pc-cillin_internet_security | Trend_micro | 2005_12.0.0_0_build_1244 (including) | 2005_12.0.0_0_build_1244 (including) |
| Pc-cillin_internet_security | Trend_micro | 2006_14.10.0.1023 (including) | 2006_14.10.0.1023 (including) |
| Pc-cillin_internet_security | Trend_micro | 2007 (including) | 2007 (including) |
| Pc_cillin_-_internet_security_2006 | Trend_micro | * | * |
| Portalprotect | Trend_micro | 1.0 (including) | 1.0 (including) |
| Portalprotect | Trend_micro | 1.2 (including) | 1.2 (including) |
| Scanmail | Trend_micro | 1.0.0 (including) | 1.0.0 (including) |
| Scanmail | Trend_micro | 2.6 (including) | 2.6 (including) |
| Scanmail | Trend_micro | 2.51 (including) | 2.51 (including) |
| Scanmail | Trend_micro | 3.8 (including) | 3.8 (including) |
| Scanmail | Trend_micro | 3.81 (including) | 3.81 (including) |
| Scanmail | Trend_micro | 6.1 (including) | 6.1 (including) |
| Scanmail | Trend_micro | gold (including) | gold (including) |
| Scanmail_emanager | Trend_micro | * | * |
| Scanning_engine | Trend_micro | 7.1.0 (including) | 7.1.0 (including) |
| Serverprotect | Trend_micro | 5.3.1 (including) | 5.3.1 (including) |
| Serverprotect | Trend_micro | 5.5.8 (including) | 5.5.8 (including) |
| Serverprotect | Trend_micro | 5.58 (including) | 5.58 (including) |
| Serverprotect | Trend_micro | linux (including) | linux (including) |
| Serverprotect | Trend_micro | linux_1.2.0 (including) | linux_1.2.0 (including) |
| Serverprotect | Trend_micro | novell_netware (including) | novell_netware (including) |
| Serverprotect | Trend_micro | windows (including) | windows (including) |
| Viruswall | Trend_micro | 3.0.1 (including) | 3.0.1 (including) |
| Web_security_suite | Trend_micro | 1.2.0 (including) | 1.2.0 (including) |
| Webprotect | Trend_micro | 3.1.0 (including) | 3.1.0 (including) |
References
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
- http://jvn.jp/jp/JVN%2377366274/index.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
- http://osvdb.org/33038
- http://secunia.com/advisories/24087
- http://secunia.com/advisories/24128
- http://securitytracker.com/id?1017601
- http://securitytracker.com/id?1017602
- http://securitytracker.com/id?1017603
- http://www.jpcert.or.jp/at/2007/at070004.txt
- http://www.kb.cert.org/vuls/id/276432
- http://www.securityfocus.com/bid/22449
- http://www.vupen.com/english/advisories/2007/0522
- http://www.vupen.com/english/advisories/2007/0569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32352
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
- http://jvn.jp/jp/JVN%2377366274/index.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
- http://osvdb.org/33038
- http://secunia.com/advisories/24087
- http://secunia.com/advisories/24128
- http://securitytracker.com/id?1017601
- http://securitytracker.com/id?1017602
- http://securitytracker.com/id?1017603
- http://www.jpcert.or.jp/at/2007/at070004.txt
- http://www.kb.cert.org/vuls/id/276432
- http://www.securityfocus.com/bid/22449
- http://www.vupen.com/english/advisories/2007/0522
- http://www.vupen.com/english/advisories/2007/0569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32352