What’s Vulnerable › Vulnerabilities

CVE-2007-0851

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-08 · updated 2026-06-16

Description

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

Affected products

• Trend Micro Client-Server-Messaging Suite Smb: gold
• Trend Micro Client-Server Suite Smb: gold
• Trend Micro Control Manager: 2.5.0, 3.5, gold, netware
• Trend Micro Interscan Emanager: 3.5, 3.5.2, 3.6, 3.51, 3.51_j
• Trend Micro Interscan Messaging Security Suite: 3.81, 5.5, 5.5_build_1183, gold
• Trend Micro Interscan Viruswall: 3.0.1, 3.1.0, 3.2.3, 3.3, 3.6, 3.6.0_build_1182 (+9)
• Trend Micro Interscan Viruswall For Windows Nt: 3.4, 3.5, 3.6, 3.51, 3.52, 3.52_build1466 (+1)
• Trend Micro Interscan Viruswall Scan Engine: 7.510.0-1002
• Trend Micro Interscan Web Security Suite: gold
• Trend Micro Interscan Webmanager: 1.2, 2.0, 2.1
• Trend Micro Interscan Webprotect: gold
• Trend Micro Officescan: 3.0, 4.5.0, 7.3, corporate_3.0, corporate_3.1.1, corporate_3.5 (+9)
• Trend Micro Pc-Cillin: 6.0, 2000, 2002, 2003, 2005, 2006
• Trend Micro Pc-Cillin Internet Security: 14_14.00.1485, 2005_12.0.0_0_build_1244, 2006_14.10.0.1023, 2007
• Trend Micro Pc Cillin - Internet Security 2006: all versions
• Trend Micro Portalprotect: 1.0, 1.2
• Trend Micro Scanmail: 1.0.0, 2.6, 2.51, 3.8, 3.81, 6.1 (+1)
• Trend Micro Scanmail Emanager: all versions
• Trend Micro Scanning Engine: 7.1.0
• Trend Micro Serverprotect: 5.3.1, 5.5.8, 5.58, linux, linux_1.2.0, novell_netware (+1)
• Trend Micro Viruswall: 3.0.1
• Trend Micro Web Security Suite: 1.2.0
• Trend Micro Webprotect: 3.1.0

References

• http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
• http://jvn.jp/jp/JVN%2377366274/index.html
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
• http://osvdb.org/33038
• http://secunia.com/advisories/24087
• http://secunia.com/advisories/24128
• http://securitytracker.com/id?1017601
• http://securitytracker.com/id?1017602
• http://securitytracker.com/id?1017603
• http://www.jpcert.or.jp/at/2007/at070004.txt
• http://www.kb.cert.org/vuls/id/276432
• http://www.securityfocus.com/bid/22449

Get alerted when CVE-2007-0851 or the next vulnerability affects your stack