CVE-2008-2434

Currently unrated

Key Information:

Vendor
Trend Micro
Status
Housecall
Vendor
CVE Published:
23 December 2008

Summary

The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder.

References

http://www.kb.cert.org/vuls/id/541025
third-party-advisoryx_refsource_CERT-VN
https://exchange.xforce.ibmcloud.com/vulnerabilities/47524
vdb-entryx_refsource_XF
http://securityreason.com/securityalert/4802
third-party-advisoryx_refsource_SREASON

EPSS Score

27% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.