NVD

Id
3727  
Name
CVE-2008-3865  
Description
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-21  
Modified Date
2011-03-07  
Seq
2008-3865  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23605 3727 CVE-2008-3865 4937  View
23606 3727 CVE-2008-3865 20090120 Secunia Research: Trend Micro Network Security Component Vulnerabilities  View
23607 3727 CVE-2008-3865 33358  View
23608 3727 CVE-2008-3865 1021614  View
23609 3727 CVE-2008-3865 1021615  View
23610 3727 CVE-2008-3865 http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt  View
23611 3727 CVE-2008-3865 ADV-2009-0191  View
23612 3727 CVE-2008-3865 tmpfw-apithread-bo(48107)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44290 JVNDB-2009-005297 Trend Micro NSC モジュールのファイアーウォールにおけるヒープベースのバッファオーバーフローの脆弱性 Trend Micro OfficeScan、Internet Security 2007 および 2008 で使用されている Trend Micro Network Security Component (NSC) モジュールのファイアーウォールの ApiThread 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3865 33978 CVE-2008-3865 3727 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005297.html 2009-01-16 2012-12-20 View