CVE-2007-0851: Buffer Overflow
Published Feb 8, 2007
·Updated
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.
Affected Software
118 affected components
Trend Micro Client-server-messaging Suite Smb=gold
Trend Micro Client-server Suite Smb=gold
Trend Micro Control Manager=2.5.0
Trend Micro Control Manager=3.5
Trend Micro Control Manager=gold
Trend Micro Control Manager=gold
Trend Micro Control Manager=gold
Trend Micro Control Manager=gold
Trend Micro Control Manager=gold
Trend Micro Control Manager=netware
Trend Micro Interscan Emanager=3.5
Trend Micro Interscan Emanager=3.5.2
Trend Micro Interscan Emanager=3.6
Trend Micro Interscan Emanager=3.6
Trend Micro Interscan Emanager=3.51
Trend Micro Interscan Emanager=3.51_j
Trend Micro InterScan Messaging Security Suite
Trend Micro InterScan Messaging Security Suite=3.81
Trend Micro InterScan Messaging Security Suite=5.5
Trend Micro InterScan Messaging Security Suite=5.5_build_1183
Trend Micro InterScan Messaging Security Suite=gold
Trend Micro InterScan Messaging Security Suite=gold
Trend Micro InterScan Messaging Security Suite=gold
Trend Micro InterScan VirusWall=3.0.1
Trend Micro InterScan VirusWall=3.0.1
Trend Micro InterScan VirusWall=3.1.0
Trend Micro InterScan VirusWall=3.2.3
Trend Micro InterScan VirusWall=3.3
Trend Micro InterScan VirusWall=3.6
Trend Micro InterScan VirusWall=3.6
Trend Micro InterScan VirusWall=3.6
Trend Micro InterScan VirusWall=3.6
Trend Micro InterScan VirusWall=3.6.0_build_1182
Trend Micro InterScan VirusWall=3.6.0_build1166
Trend Micro InterScan VirusWall=3.6.5
Trend Micro InterScan VirusWall=3.7.0
Trend Micro InterScan VirusWall=3.7.0_build1190
Trend Micro InterScan VirusWall=3.8.0_build1130
Trend Micro InterScan VirusWall=3.32
Trend Micro InterScan VirusWall=3.81
Trend Micro InterScan VirusWall=5.1
Trend Micro InterScan VirusWall=gold
Trend Micro InterScan VirusWall=gold
Trend Micro InterScan VirusWall=gold
Trend Micro InterScan VirusWall=gold
Trend Micro InterScan VirusWall=gold
Trend Micro InterScan VirusWall for Windows NT=3.4
Trend Micro InterScan VirusWall for Windows NT=3.5
Trend Micro InterScan VirusWall for Windows NT=3.6
Trend Micro InterScan VirusWall for Windows NT=3.51
Trend Micro InterScan VirusWall for Windows NT=3.52
Trend Micro InterScan VirusWall for Windows NT=3.52_build1466
Trend Micro InterScan VirusWall for Windows NT=5.1.0
Trend Micro Interscan Viruswall Scan Engine=7.510.0-1002
Trend Micro InterScan Web Security Suite
Trend Micro InterScan Web Security Suite
Trend Micro InterScan Web Security Suite=gold
Trend Micro InterScan Web Security Suite=gold
Trend Micro InterScan Web Security Suite=gold
Trend Micro InterScan WebManager=1.2
Trend Micro InterScan WebManager=2.0
Trend Micro InterScan WebManager=2.1
Trend Micro Interscan Webprotect=gold
Trend Micro OfficeScan=3.0
Trend Micro OfficeScan=4.5.0
Trend Micro OfficeScan=7.3
Trend Micro OfficeScan=corporate_3.0
Trend Micro OfficeScan=corporate_3.1.1
Trend Micro OfficeScan=corporate_3.5
Trend Micro OfficeScan=corporate_3.5
Trend Micro OfficeScan=corporate_3.11
Trend Micro OfficeScan=corporate_3.11
Trend Micro OfficeScan=corporate_3.13
Trend Micro OfficeScan=corporate_3.13
Trend Micro OfficeScan=corporate_3.54
Trend Micro OfficeScan=corporate_5.02
Trend Micro OfficeScan=corporate_5.5
Trend Micro OfficeScan=corporate_5.58
Trend Micro OfficeScan=corporate_6.5
Trend Micro OfficeScan=corporate_7.0
Trend Micro OfficeScan=corporate_7.3
Trend Micro PC-Cillin=6.0
Trend Micro PC-Cillin=2000
Trend Micro PC-Cillin=2002
Trend Micro PC-Cillin=2003
Trend Micro PC-Cillin=2005
Trend Micro PC-Cillin=2006
Trend Micro PC-cillin Internet Security=14_14.00.1485
Trend Micro PC-cillin Internet Security=2005_12.0.0_0_build_1244
Trend Micro PC-cillin Internet Security=2006_14.10.0.1023
Trend Micro PC-cillin Internet Security=2007
Trend Micro PC Cillin - Internet Security 2006
Trend Micro Portalprotect=1.0
Trend Micro Portalprotect=1.2
Trend Micro ScanMail=1.0.0
Trend Micro ScanMail=2.6
Trend Micro ScanMail=2.51
Trend Micro ScanMail=3.8
Trend Micro ScanMail=3.81
Trend Micro ScanMail=6.1
Trend Micro ScanMail=gold
Trend Micro ScanMail=gold
Trend Micro ScanMail=gold
Trend Micro ScanMail=gold
Trend Micro ScanMail=gold
Trend Micro Scanmail Emanager
Trend Micro Scanning Engine=7.1.0
Trend Micro ServerProtect=5.3.1
Trend Micro ServerProtect=5.5.8
Trend Micro ServerProtect=5.58
Trend Micro ServerProtect=5.58
Trend Micro ServerProtect=linux
Trend Micro ServerProtect=linux_1.2.0
Trend Micro ServerProtect=novell_netware
Trend Micro ServerProtect=windows
Trend Micro VirusWall=3.0.1
Trend Micro Web Security Suite=1.2.0
Trend Micro Webprotect=3.1.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Feb 8, 2007
CVE Published
06:28 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0851?
CVE-2007-0851 is classified with high severity due to the potential for remote code execution.
2
How do I fix CVE-2007-0851?
To fix CVE-2007-0851, update the Trend Micro Scan Engine to version 8.300 with the latest virus pattern file.
3
Which versions are affected by CVE-2007-0851?
CVE-2007-0851 affects Trend Micro Scan Engine 8.000 and 8.300 prior to virus pattern file 4.245.00.
4
What is the exploit vector for CVE-2007-0851?
CVE-2007-0851 can be exploited through a malformed UPX compressed executable sent by remote attackers.
5
Are there any known exploitation examples of CVE-2007-0851?
Yes, CVE-2007-0851 has been documented in various vulnerability reports indicating potential exploitation in real-world scenarios.