Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability
Summary
This host has Trend Micro OfficeScan running which is prone to Buffer Overflow vulnerability.
Impact
Successful exploitation lets the attackers to cause a denial of service or execute arbitrary code via HTTP request that lacks a method token or format string specifiers in PROPFIND request. Impact Level: Application/System
Solution
Apply Critical Patch Build 1224 for Trend Micro OfficeScan v10.0, and Patch 5 Build 3510 for Trend Micro OfficeScan v8.0 Service Pack 1, For updates refer to http://www.trendmicro.com/Download/product.asp?productid=5
Insight
The flaw is due to an unspecified error in the Trend Micro URL filtering (TMUFE) engine while processing malformed data which can be exploited to cause a buffer overflow and crash or hang the application.
Affected
Trend Micro OfficeScan 8.0 before SP1 Patch 5 - Build 3510 Trend Micro OfficeScan 10.0 before Build 1224
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities