CVE-2007-0851

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289Patch, Vendor Advisory
http://jvn.jp/jp/JVN%2377366274/index.html
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470Patch, Vendor Advisory
http://osvdb.org/33038
http://secunia.com/advisories/24087Patch, Vendor Advisory
http://secunia.com/advisories/24128
http://securitytracker.com/id?1017601Patch, Vendor Advisory
http://securitytracker.com/id?1017602
http://securitytracker.com/id?1017603
http://www.jpcert.or.jp/at/2007/at070004.txt
http://www.kb.cert.org/vuls/id/276432US Government Resource
http://www.securityfocus.com/bid/22449Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0522
http://www.vupen.com/english/advisories/2007/0569
https://exchange.xforce.ibmcloud.com/vulnerabilities/32352
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289Patch, Vendor Advisory
http://jvn.jp/jp/JVN%2377366274/index.html
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470Patch, Vendor Advisory
http://osvdb.org/33038
http://secunia.com/advisories/24087Patch, Vendor Advisory
http://secunia.com/advisories/24128
http://securitytracker.com/id?1017601Patch, Vendor Advisory
http://securitytracker.com/id?1017602
http://securitytracker.com/id?1017603
http://www.jpcert.or.jp/at/2007/at070004.txt
http://www.kb.cert.org/vuls/id/276432US Government Resource
http://www.securityfocus.com/bid/22449Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0522
http://www.vupen.com/english/advisories/2007/0569
https://exchange.xforce.ibmcloud.com/vulnerabilities/32352

Timeline

Published: Feb 8, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-08526.8Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML via the "Keyword sea CVE-2007-08537.5SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Username form field. NOTE: CVE-2007-08547.5Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code v CVE-2007-08556.8Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to ex CVE-2007-08567.2TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend M CVE-2007-08574.3Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML v CVE-2007-08592.1The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obta CVE-2007-08607.5Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1 allow remote attackers to execute arbitrary PHP code via a U CVE-2007-08617.5PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary P CVE-2007-08626.8PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via CVE-2007-086310.0PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tc_config[ro CVE-2007-08647.5SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parame