The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
TrendMicro OfficesScan Corporate Edition Format String
------------------------------------------------------------------------
SUMMARY
"
<http://www.trendmicro.com/en/products/desktop/osce/evaluate/overview.htm>
Trend Micro OfficeScan Client/Server Edition protects enterprise networks
from viruses, Trojans, worms, hackers, and network viruses, plus spyware
and mixed threat attacks."
A format string vulnerability was discovered within Trendmicro OfficeScan.
DETAILS
Vulnerable Systems:
* Trendmicro OfficeScan Corporate Edition version 7.3
Immune Systems:
* Trendmicro OfficeScan Corporate Edition version 7.3 with Patch 1
The vulnerability is due to improper processing of format strings within
OfficeScan Management consoles ActiveX Control "ATXCONSOLE.OCX". Specially
crafted format string passed back to the Management consoles Remote Client
Install name search would allow access to the process stack.
If successfully exploited, this could allow the user to execute code of
the attackers choice on the system running the ActiveX management Console.
Fix:
The solutions to fix this vulnerability is addressed by OfficeScan
Corporate Edition 7.3 Patch 1.
Download it here:
<http://www.trendmicro.com/download/product.asp?productid=5>
http://www.trendmicro.com/download/product.asp?productid=5
Disclosure Timeline:
* 06/27/2006 - Reported Vulnerability to Vendor.
* 06/30/2006 - Vendor supplied hot fix to Layered Defense for testing.
* 09/21/2006 - Vendor releases fix in Patch 1 to public.
ADDITIONAL INFORMATION
The information has been provided by <http://www.LayeredDefense.com/>
Deral Heiland.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
