CVE-2008-2434: Code Injection
The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in HousecallActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2434?
CVE-2008-2434 is considered a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2008-2434?
To fix CVE-2008-2434, update your Trend Micro HouseCall to the latest version that addresses this vulnerability.
What platforms are affected by CVE-2008-2434?
CVE-2008-2434 affects specific versions of Trend Micro HouseCall, including 6.51.0.1028 and 6.6.0.1278.
Can CVE-2008-2434 lead to code execution?
Yes, CVE-2008-2434 can be exploited to download and execute malicious files on the affected client system.
What type of attack can exploit CVE-2008-2434?
CVE-2008-2434 can be exploited via a specially crafted 'custom update server' argument to execute malicious libraries.