Approved changes feed: RSS · Atom

cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrend Micro (6c9d6123-4a91-55d6-a111-4d33b7deab1d)
ProductInternet Security 2007 (9ba715c0-4900-57f3-885f-b3c6604bf266)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3866 vulnerable 2026-06-08 04:50:37.006550 Details available
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.489Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3865 vulnerable 2026-06-08 04:50:37.006103 Details available
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3864 vulnerable 2026-06-08 04:50:37.004782 Details available
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T09:53:00.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.