Approved changes feed: RSS · Atom

cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*

part: a version: 8.0 update: sp1

VendorTrend Micro (6c9d6123-4a91-55d6-a111-4d33b7deab1d)
ProductOfficescan (ac2827c9-a0d9-599b-957e-8561da501745)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4403 vulnerable 2026-06-08 04:50:38.816608 Details available
The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism."
Published: 2008-10-03T15:00:00.000Z
Updated: 2024-08-07T10:17:09.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4402 vulnerable 2026-06-08 04:50:38.815234 Details available
Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors.
Published: 2008-10-03T15:00:00.000Z
Updated: 2024-08-07T10:17:09.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3866 vulnerable 2026-06-08 04:50:37.006589 Details available
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.489Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3865 vulnerable 2026-06-08 04:50:37.006148 Details available
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3864 vulnerable 2026-06-08 04:50:37.005611 Details available
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3862 vulnerable 2026-06-08 04:50:37.000968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2439 vulnerable 2026-06-08 04:50:24.088438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2437 vulnerable 2026-06-08 04:50:24.087298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.