CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a…
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.08% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- trend micro/internet security 2007 · trend micro/internet security 2008 · trend micro/officescan
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/31160Vendor Advisory
- http://secunia.com/advisories/33609Patch, Vendor Advisory
- http://secunia.com/secunia_research/2008-42/
- http://securityreason.com/securityalert/4937
- http://www.securityfocus.com/archive/1/500195/100/0/threaded
- http://www.securityfocus.com/bid/33358Patch
- http://www.securitytracker.com/id?1021614
- http://www.securitytracker.com/id?1021615
- http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txtVendor Advisory
- http://www.vupen.com/english/advisories/2009/0191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48106
- http://secunia.com/advisories/31160Vendor Advisory
- http://secunia.com/advisories/33609Patch, Vendor Advisory
- http://secunia.com/secunia_research/2008-42/
- http://securityreason.com/securityalert/4937
- http://www.securityfocus.com/archive/1/500195/100/0/threaded
- http://www.securityfocus.com/bid/33358Patch
- http://www.securitytracker.com/id?1021614
- http://www.securitytracker.com/id?1021615
- http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txtVendor Advisory
- http://www.vupen.com/english/advisories/2009/0191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48106
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.