CVE-2010-0564 Memory corruption in n/a

What is CVE-2010-0564?

CVE-2010-0564 is a medium-severity memory corruption vulnerability in Trendmicro Officescan, published on 10 Feb 2010. It can be exploited over the network.

Official description

Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors. NOTE: it is likely that this issue also affects tmufeng.dll before 2.0.0.1049 for OfficeScan 10.0.

Weakness: CWE-119

Which versions are affected by CVE-2010-0564?

It affects 1 product.

Products include Trendmicro Officescan.

How do I fix CVE-2010-0564?

No fix has been published for CVE-2010-0564 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2010-0564 being exploited?

There is no known exploitation of CVE-2010-0564 in the wild and no public exploit code.

Other vulnerabilities in Trendmicro Officescan

• CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Exploited High 8.8
• CVE-2017-14089 Memory corruption in Trend Micro OfficeScan Critical 9.8
• CVE-2017-11393 Command injection in Trend Micro OfficeScan Critical 9.8
• CVE-2017-11394 Command injection in Trend Micro OfficeScan Critical 9.8
• CVE-2018-10508 Privilege escalation in Trend Micro OfficeScan High 8.8

All Trendmicro Officescan vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8frw-h99g-7h23.