Multiple vulnerabilities in Trend Micro HouseCall

Description

Multiple critical vulnerabilities have been found in Trend Micro HouseCall. Malicious users can exploit these vulnerabilities to execute arbitrary code or download arbitrary files. Below is a complete list of vulnerabilities

1. A use-after-free vulnerability can be exploited remotely via a specially designed callback function;
2. An unspecified vulnerability can be exploited remotely via a specially designed update server.

Original advisories

Related products

• Trend-Micro-HouseCall-ActiveX-Control

CVE list

• CVE-2008-2435
  critical
• CVE-2008-2434
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com