Trend Micro URL Filtering Engine Buffer Overflow Vulnerability

Bugtraq ID:	38083
Class:	Boundary Condition Error
CVE:	CVE-2010-0564
Remote:	Yes
Local:	No
Published:	Jan 22 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Trend Micro
Vulnerable:	Trend Micro OfficeScan 8.0 SP 1 Patch 4 Trend Micro OfficeScan 8.0 SP 1 Patch 3.1 Trend Micro OfficeScan 8.0 SP 1 Patch 2 Trend Micro OfficeScan 8.0 SP 1 Patch 1 - Microsoft Windows 3.1 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1 Trend Micro OfficeScan 8.0 Service Pack 1 - Microsoft Windows 3.1 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1
Not Vulnerable:	Trend Micro OfficeScan 8.0 SP 1 Patch 5

Trend Micro URL Filtering Engine Buffer Overflow Vulnerability

Trend Micro OfficeScan is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Successful exploits may allow an attacker to execute arbitrary code within the context of the affected application. This may facilitate a complete compromise of vulnerable computers. Failed exploit attempts will likely result in denial-of-service conditions.

This issue affects the following:

OfficeScan 8.0 Service Pack 1
OfficeScan 8.0 Service Pack 1 with Patch 1
OfficeScan 8.0 Service Pack 1 with Patch 2
OfficeScan 8.0 Service Pack 1 with Patch 3.1
OfficeScan 8.0 Service Pack 1 with Patch 4

Trend Micro URL Filtering Engine Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro URL Filtering Engine Buffer Overflow Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

Trend Micro URL Filtering Engine Buffer Overflow Vulnerability

References:

• Trend Micro OfficeScan Product Homepage (Trend Micro)
  
• Trend Micro(TM) OfficeScan(TM) 8.0 Service Pack 1 Patch 5 - Build 3510 (Trend Micro)