PT-2008-3902
CVE-2008-2434
·
تاريخ النشر
2008-12-23
·
تاريخ التحديث
2018-10-11
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Trend Micro HouseCall versions 6.51.0.1028 through 6.6.0.1278
Description:
The issue allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. This can be leveraged for code execution by writing to a Startup folder.
Recommendations:
For versions 6.51.0.1028 through 6.6.0.1278, consider disabling the HouseCall ActiveX control until a patch is available. Restrict access to the custom update server argument to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾