Approved changes feed: RSS · Atom

cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*

part: a version: 17.0.1224 update: *

VendorTrend Micro (6c9d6123-4a91-55d6-a111-4d33b7deab1d)
ProductInternet Security 2008 (f5c5a5bb-2f8a-55d3-9cde-6d212b59fc00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/trendmicro/new-release-version purl2cpe 2026-06-01 10:13:26.994508
pkg:golang/github.com/trendmicro/new-release-version purl2cpe 2026-06-01 10:13:26.994512
pkg:golang/github.com/trendmicro/new-release-version/v2 purl2cpe 2026-06-01 10:13:26.994515

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3866 vulnerable 2026-06-08 04:50:37.006571 Details available
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.489Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3865 vulnerable 2026-06-08 04:50:37.006128 Details available
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3864 vulnerable 2026-06-08 04:50:37.005567 Details available
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.