Vulnerability Assessment & Network Security Forums
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.
Vulnerability Assessment Details
Checks if vulnerable version Trend Micro Office scan is installed
Detailed Explanation for this Vulnerability Assessment
The remote Windows host is affected by a remote buffer overflow
The remote host is running Trend Micro Antivirus, a commercial
anti-virus software package for Windows. The remote version of the
installed antivirus is vulnerable to a remote buffer overflow
vulnerability. The issue exists due a vulnerability in the ActiveX
control installed by the OfficeScan server during a web install of the
OfficeScan clients. The clients cache this ActiveX control which can
be exploited by a malicious website. The attacker can trigger this
issue by enticing a user to click on a malicious link or sending the
the link in an email and urging the user to click on it. Successful
exploitation of this issue might result in arbitrary code execution.
Apply the security patch released by the vendor.
Network Security Threat Level:
High / CVSS Base Score : 8.0
Networks Security ID: 22585
Vulnerability Assessment Copyright: This script is Copyright (C) 2007 Tenable Network Security, Inc
|Cisco Catalyst WS-C3560-48PS-E V05 48-Port PoE Ethernet Switch 3650 Series+Ears
|Cisco NEXUS 5672UP N5K-C5672UP Switch 48 Port 2019 Dual 1100W Power
|Brocade ICX7250-48P 48-Port PoE Switch
|Cisco Catalyst WS-C3750X-24T-S 24-Port Gigabit Switch with C3KX-NM-1G
No Discussions have been posted on this vulnerability.