CVE-2008-2434

Name of the Vulnerable Software and Affected Versions: Trend Micro HouseCall versions 6.51.0.1028 through 6.6.0.1278

Description: The issue allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. This can be leveraged for code execution by writing to a Startup folder.

Recommendations: For versions 6.51.0.1028 through 6.6.0.1278, consider disabling the HouseCall ActiveX control until a patch is available. Restrict access to the custom update server argument to minimize the risk of exploitation.