medium5.0
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 S…
Impact
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Internet Security 2007 | All versions |
| Trend Micro | Internet Security 2008 | Version 17.0.1224 |
| Trend Micro | Officescan | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31160
- http://secunia.com/advisories/33609
- http://secunia.com/secunia_research/2008-42/
- http://securityreason.com/securityalert/4937
- http://www.securityfocus.com/archive/1/500195/100/0/threaded
- http://www.securityfocus.com/bid/33358
- http://www.securitytracker.com/id?1021614
- http://www.securitytracker.com/id?1021615
- http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt
- http://www.vupen.com/english/advisories/2009/0191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48106
- http://secunia.com/advisories/31160
- http://secunia.com/advisories/33609
- http://secunia.com/secunia_research/2008-42/
- http://securityreason.com/securityalert/4937
- http://www.securityfocus.com/archive/1/500195/100/0/threaded
- http://www.securityfocus.com/bid/33358
- http://www.securitytracker.com/id?1021614
- http://www.securitytracker.com/id?1021615
- http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt
- http://www.vupen.com/english/advisories/2009/0191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48106