exploits , vulnerabilities , articles , Trend Micro AntiVirus Engine Tmxpflt.SYS Local Buffer Overflow Vulnerability

Title	Trend Micro AntiVirus Engine Tmxpflt.SYS Local Buffer Overflow Vulnerability
Published	2007-10-25-12:00AM
Updated	2007-10-26-06:46PM
Class	Boundary Condition Error
CVE	CVE-2007-4277
Remote	No
Local	Yes
Credit	Rub?©n Santamarta is credited with discovering this issue.
Vulnerable	Trend Micro ServerProtect for Windows 5.58 Trend Micro ServerProtect for Windows Trend Micro ServerProtect for Novell Netware Trend Micro ServerProtect for Network Appliance Filer 5.62 Trend Micro ServerProtect for Network Appliance Filer 5.61 Trend Micro ServerProtect for Linux 1.2 Trend Micro ServerProtect for Linux Trend Micro ServerProtect for EMC 5.58 Trend Micro ServerProtect 5.5.8 Trend Micro ServerProtect 5.3.1 Trend Micro ServerProtect 5.58 Trend Micro Server Protect 5.58 Trend Micro PCCillin Internet Security 2007 Trend Micro OfficeScan For Microsoft SBS 4.5 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.13 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.11 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.5 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.1.1 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for Windows NT Server 3.0 Microsoft Windows NT 4.0 Trend Micro OfficeScan Corporate Edition for SMB2.0 6.0 Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 5.58 Trend Micro OfficeScan Corporate Edition 5.5 Trend Micro OfficeScan Corporate Edition 5.0 2 Trend Micro OfficeScan Corporate Edition 3.54 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows 98SE Microsoft Windows ME Microsoft Windows NT 4.0 SP6a Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP3 Novell Netware 5.1 Novell Netware 5.0 Novell Netware 4.11 Novell Netware 4.1 Novell Netware 3.1.2 Trend Micro OfficeScan Corporate Edition 3.13 Microsoft Windows 3.1 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Novell Netware 4.11 Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.11 Microsoft Windows 3.1 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Novell Netware 4.11 Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.5 Microsoft Windows 3.1 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Novell Netware 4.11 Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.0 Microsoft Windows 3.1 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Novell Netware 4.11 Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 8.0.patch build 1042 Trend Micro OfficeScan Corporate Edition 8.0 Trend Micro OfficeScan Corporate Edition 7.3 Trend Micro OfficeScan Corporate Edition 7.3 Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 6.0 Trend Micro Office Scan 7.3 Trend Micro Antivirus 2007 Trend Micro AntiSpyware for Consumer 3.5
Not Vulnerable
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2008-11-22 KVIrc URI Handler Remote Command Execution Vulnerability
2008-11-22 NVIDIA Cg Toolkit Installer Insecure Temporary File Creation Vulnerability
2008-11-22 TkUsr Insecure Temporary File Creation Vulnerability
2008-11-21 TAU Tuning and Analysis Utilities Insecure Temporary File Creation Vulnerabilities
2008-11-21 Maildirsync Insecure Temporary File Creation Vulnerability
2008-11-21 TkMan Insecure Temporary File Creation Vulnerability
2008-11-21 Apple iPhone Configuration Web Utility for Windows Directory Traversal Vulnerability
2008-11-21 Cisco IOS and CatOS VLAN Trunking Protocol Packet Handling Denial Of Service Vulnerability
2008-11-21 vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability
2008-11-21 Apple Mac OS X CoreGraphics Multiple Memory Corruption Vulnerabilities