{"id":"CVE-2007-0851","aliases":["EUVD-2007-0848","GHSA-h2w9-3qj3-7rf9"],"status":"published","title":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00...","description":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.08576,"percentile":0.95106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-02-08T18:00:00Z","modified":"2026-06-16T22:36:24Z","products":[{"vendor":"trend_micro","product":"client-server-messaging_suite_smb"},{"vendor":"trend_micro","product":"client-server_suite_smb"},{"vendor":"trend_micro","product":"control_manager"},{"vendor":"trend_micro","product":"interscan_emanager"},{"vendor":"trend_micro","product":"interscan_messaging_security_suite"},{"vendor":"trend_micro","product":"interscan_viruswall"},{"vendor":"trend_micro","product":"interscan_viruswall_for_windows_nt"},{"vendor":"trend_micro","product":"interscan_viruswall_scan_engine"},{"vendor":"trend_micro","product":"interscan_web_security_suite"},{"vendor":"trend_micro","product":"interscan_webmanager"},{"vendor":"trend_micro","product":"interscan_webprotect"},{"vendor":"trend_micro","product":"officescan"},{"vendor":"trend_micro","product":"pc-cillin"},{"vendor":"trend_micro","product":"pc-cillin_internet_security"},{"vendor":"trend_micro","product":"pc_cillin_-_internet_security_2006"},{"vendor":"trend_micro","product":"portalprotect"},{"vendor":"trend_micro","product":"scanmail"},{"vendor":"trend_micro","product":"scanmail_emanager"},{"vendor":"trend_micro","product":"scanning_engine"},{"vendor":"trend_micro","product":"serverprotect"},{"vendor":"trend_micro","product":"viruswall"},{"vendor":"trend_micro","product":"web_security_suite"},{"vendor":"trend_micro","product":"webprotect"}],"references":[{"url":"http://securitytracker.com/id?1017601","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/22449","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Vendor Advisory"]},{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034289","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1017603","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.jpcert.or.jp/at/2007/at070004.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/24087","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/33038","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0522","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://jvn.jp/jp/JVN%2377366274/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/276432","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=470","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32352","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0569","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securitytracker.com/id?1017602","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/24128","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0851"},{"url":"https://github.com/advisories/GHSA-h2w9-3qj3-7rf9"}],"sources":{"cve":[{"id":"CVE-2007-0851","description":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.","status":"published","published":"2007-02-08T18:00:00Z","modified":"2024-08-07T12:34:21.122Z","updated_at":"2026-11-02T13:34:03.879328Z"}],"euvd":[{"id":"EUVD-2007-0848","description":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.","status":"published","published":"2007-02-08T18:00:00Z","modified":"2024-08-07T12:34:21Z","updated_at":"2026-11-03T01:38:28.771987Z"}],"ghsa":[{"id":"GHSA-h2w9-3qj3-7rf9","title":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00...","description":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.","status":"published","published":"2022-05-01T17:47:31Z","modified":"2023-01-31T05:03:19Z","updated_at":"2026-11-02T14:48:26.443063Z"}],"nvd":[{"id":"CVE-2007-0851","description":"Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable.","status":"published","published":"2007-02-08T18:28:00Z","modified":"2026-06-16T22:36:24.837Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.10493Z"}]}}