NVD

Id
58381  
Name
CVE-2007-6386  
Description
Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service (SfCtlCom.exe crash), and allows local users to gain privileges, via a malformed .zip archive with a long name, as demonstrated by a .zip file created via format string specifiers in a crafted .uue file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-14  
Modified Date
2011-03-07  
Seq
2007-6386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299394 58381 CVE-2007-6386 http://esupport.trendmicro.com/support/viewxml.do?ContentID=1036464  View
299395 58381 CVE-2007-6386 http://secway.org/advisory/AD20071211.txt  View
299396 58381 CVE-2007-6386 1019079  View
299397 58381 CVE-2007-6386 ADV-2007-4191  View
299398 58381 CVE-2007-6386 trendmicro-pccscan-zip-bo(38982)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57739 JVNDB-2007-006431 Trend Micro AntiVirus などの PccScan.dll におけるスタックベースのバッファオーバーフローの脆弱性 Trend Micro AntiVirus プラス AntiSpyware 2008、Internet Security 2008、および Internet Security Pro 2008 の PccScan.dll には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-6386 29741 CVE-2007-6386 58381 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006431.html 2007-12-14 2012-12-20 View