ByteOS Network

NVD Vulnerability Details :

CVE-2008-2435

Modified

Source-PSIRT-CNA@flexerasoftware.com

Published At-23 Dec, 2008 | 18:30

Updated At-11 Oct, 2018 | 20:41

Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Trend Micro Incorporated

>>housecall>>6.6.0.1278

cpe:2.3:a:trend_micro:housecall:6.6.0.1278:*:*:*:*:*:*:*

Trend Micro Incorporated

>>housecall>>6.51.0.1028

cpe:2.3:a:trend_micro:housecall:6.51.0.1028:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646	PSIRT-CNA@flexerasoftware.com	Vendor Advisory
http://secunia.com/advisories/31583	PSIRT-CNA@flexerasoftware.com	Vendor Advisory
http://secunia.com/secunia_research/2008-34/	PSIRT-CNA@flexerasoftware.com	Vendor Advisory
http://securitytracker.com/id?1021481	PSIRT-CNA@flexerasoftware.com	N/A
http://www.kb.cert.org/vuls/id/702628	PSIRT-CNA@flexerasoftware.com	US Government Resource
http://www.osvdb.org/50843	PSIRT-CNA@flexerasoftware.com	N/A
http://www.securityfocus.com/archive/1/499478/100/0/threaded	PSIRT-CNA@flexerasoftware.com	N/A
http://www.securityfocus.com/bid/32950	PSIRT-CNA@flexerasoftware.com	N/A
http://www.vupen.com/english/advisories/2008/3464	PSIRT-CNA@flexerasoftware.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/47523	PSIRT-CNA@flexerasoftware.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History