Trend Micro Control Manager 'CASProcessor.exe' BLOB Remote Code Execution Vulnerability

Bugtraq ID:	48652
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 12 2011 12:00AM
Updated:	Jul 12 2011 12:00AM
Credit:	Luigi Auriemma
Vulnerable:	Trend Micro Control Manager 5.5 Trend Micro Control Manager 5.0
Not Vulnerable:

Trend Micro Control Manager 'CASProcessor.exe' BLOB Remote Code Execution Vulnerability

Trend Micro Control Manager is prone to a remote code-execution vulnerability.

An attacker can exploit this vulnerability to execute arbitrary code in the context of the SYSTEM user. Failed attacks will cause denial-of-service conditions.

Trend Micro Control Manager 5.0 and 5.5 are vulnerable; other versions may also be affected.

Trend Micro Control Manager 'CASProcessor.exe' BLOB Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro Control Manager 'CASProcessor.exe' BLOB Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Trend Micro Control Manager 'CASProcessor.exe' BLOB Remote Code Execution Vulnerability

References:

• Trend Micro Control Manager Homepage (Trend Micro)
  
• CASProcessor.exe can be used to execute a code remotely in Trend Micro Control M (Trend Micro)
  
• TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerabi (Luigi Auriemma)