Trend Micro OfficeScan Corporate Edition "ATXCONSOLE.OCX" Format String Vulnerability

[B] Trend Micro OfficeScan Corporate Edition "ATXCONSOLE.OCX" Format String Vulnerability[/B]
[I][url=http://secunia.com/advisories/22224/]Secunia Advisory: SA22224 Release Date: 2006-10-02[/url][/I]

[B]Ошибка форматной строки в ActiveX TrendMicro OfficeScan (format string) (в библиотеке элементов управления ATXCONSOLE.OCX).[/B]
[url=http://security.nnov.ru/Gnews674.html]security.nnov.ru[/url]

[B]Critical: Moderately critical[/B]
[B]Impact:[/B] DoS; System access
[B]Where:[/B] From local network
[B]Solution Status: [color=#006600]Vendor Patch[/color][/B]

[B]Software:[/B] Trend Micro OfficeScan Corporate Edition 7.x


[B]Description:[/B]
A vulnerability has been reported in Trend Micro OfficeScan Corporate Edition, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a format string error within the "ATXCONSOLE.OCX" ActiveX Control. This can potentially be exploited to execute arbitrary code by sending a specially crafted string back to the Management Console's Remote Client Install name search.

The vulnerability has been reported in Trend Micro OfficeScan Corporate Edition 7.3. Other versions may also be affected.

[B]Solution:[/B] Reportedly, this has been fixed in OfficeScan Corporate Edition 7.3 Patch 1.

Provided and/or discovered by: Deral Heiland, Layered Defense
Original Advisory: [url]http://www.layereddefense.com/TREND01OCT.html[/url]

[B]Trend Micro OfficeScan Client Removal and Arbitrary File Deletion[/B]
[I][url=http://secunia.com/advisories/22156/]Secunia Advisory: SA22156 Release Date: 2006-10-03[/url][/I]

[B]Critical: Moderately critical
Impact:[/B] Manipulation of data; DoS
[B]Where:[/B] From local network
[B]Solution Status: [color=#006600]Vendor Patch[/color]

Software:[/B]
Trend Micro OfficeScan Corporate Edition 6.x
Trend Micro OfficeScan Corporate Edition 7.x

[B]Description:[/B]
Some vulnerabilities have been reported in Trend Micro OfficeScan Corporate Edition, which can be exploited by malicious people to cause a DoS (Denial of Service) or delete arbitrary files on a vulnerable system.

The vulnerabilities are caused due to unspecified errors within the OfficeScan CGI application. This can be exploited to silently remove OfficeScan clients or delete arbitrary files on an affected OfficeScan server by sending a specially crafted HTTP POST or GET request.

[B]Solution:[/B]
OfficeScan Corporate Edition 6.5: [url]http://www.trendmicro.com/ftp/product...ce_6.5_win_en_securitypatch_b1418.exe[/url]
OfficeScan Corporate Edition 7.0: [url]http://www.trendmicro.com/ftp/product...ce_7.0_win_en_securitypatch_b1257.exe[/url]
OfficeScan Corporate Edition 7.3: [url]http://www.trendmicro.com/ftp/product...ce_7.3_win_en_securitypatch_b1053.exe[/url]

Provided and/or discovered by: Reported by the vendor.

Original Advisory: [url]http://www.trendmicro.com/download/product.asp?productid=5[/url]