Trend Micro Internet Security 2008 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Trend Micro Internet Security 2008, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2008-3866trend_microinternet_security_2008+1
EPSS score
0.40%
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.10CVE-2008-3865trend_microinternet_security_2008+1
EPSS score
6.43%
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.5CVE-2008-3864trend_microinternet_security_2008+1
EPSS score
2.08%
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.