corporate.3.11

DATE	CVE	VULNERABILITY TITLE	RISK
2007-02-08	CVE-2007-0851	Buffer Overflow vulnerability in Trend Micro Antivirus UPX Compressed PE File Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable. network trend-micro critical	9.3
2005-05-02	CVE-2005-0533	Heap Overflow vulnerability in Trend Micro VSAPI ARJ Handling Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure. network low complexity trend-micro	7.5
2004-12-31	CVE-2004-2430	Local Privilege Escalation vulnerability in Trend Micro OfficeScan Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges. local low complexity trend-micro	7.2
2004-05-07	CVE-2004-2006	Unspecified vulnerability in Trend Micro Officescan Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection. local low complexity trend-micro	4.6