CVE Feed

    Dashboard / CVE / CVE-2007-0851

    CVE-2007-0851

    Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

    Published:Feb 8, 2007
    Last Modified:Apr 23, 2026
    EPS:Feb 8, 2007
    EPSS Score:0.35246
    CVSS Score:9.3

    Affected Products

    Vendor
    Trend Micro
    Product
    Client-server-messaging Suite Smb
    Vendor
    Trend Micro
    Product
    Client-server Suite Smb
    Vendor
    Trend Micro
    Product
    Control Manager
    Vendor
    Trend Micro
    Product
    Interscan Emanager
    Vendor
    Trend Micro
    Product
    Interscan Messaging Security Suite
    Vendor
    Trend Micro
    Product
    Interscan Viruswall
    Vendor
    Trend Micro
    Product
    Interscan Viruswall For Windows Nt
    Vendor
    Trend Micro
    Product
    Interscan Viruswall Scan Engine
    Vendor
    Trend Micro
    Product
    Interscan Web Security Suite
    Vendor
    Trend Micro
    Product
    Interscan Webmanager
    Vendor
    Trend Micro
    Product
    Interscan Webprotect
    Vendor
    Trend Micro
    Product
    Officescan
    Vendor
    Trend Micro
    Product
    Pc-cillin
    Vendor
    Trend Micro
    Product
    Pc-cillin Internet Security
    Vendor
    Trend Micro
    Product
    Pc Cillin - Internet Security 2006
    Vendor
    Trend Micro
    Product
    Portalprotect
    Vendor
    Trend Micro
    Product
    Scanmail
    Vendor
    Trend Micro
    Product
    Scanmail Emanager
    Vendor
    Trend Micro
    Product
    Scanning Engine
    Vendor
    Trend Micro
    Product
    Serverprotect
    Vendor
    Trend Micro
    Product
    Viruswall
    Vendor
    Trend Micro
    Product
    Web Security Suite
    Vendor
    Trend Micro
    Product
    Webprotect

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
    http://jvn.jp/jp/JVN%2377366274/index.html
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
    http://osvdb.org/33038
    http://secunia.com/advisories/24087
    http://secunia.com/advisories/24128
    http://securitytracker.com/id?1017601
    http://securitytracker.com/id?1017602
    http://securitytracker.com/id?1017603
    http://www.jpcert.or.jp/at/2007/at070004.txt
    http://www.kb.cert.org/vuls/id/276432
    http://www.securityfocus.com/bid/22449
    http://www.vupen.com/english/advisories/2007/0522
    http://www.vupen.com/english/advisories/2007/0569
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32352
    http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289
    http://jvn.jp/jp/JVN%2377366274/index.html
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470
    http://osvdb.org/33038
    http://secunia.com/advisories/24087
    http://secunia.com/advisories/24128
    http://securitytracker.com/id?1017601
    http://securitytracker.com/id?1017602
    http://securitytracker.com/id?1017603
    http://www.jpcert.or.jp/at/2007/at070004.txt
    http://www.kb.cert.org/vuls/id/276432
    http://www.securityfocus.com/bid/22449
    http://www.vupen.com/english/advisories/2007/0522
    http://www.vupen.com/english/advisories/2007/0569
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32352

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High