CVE-2003-0646: Trend Micro Damage Cleanup Server

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings.

Affected products

• Trend Micro Damage Cleanup Server: version 1.0 only
• Trend Micro Housecall: version 5.5 only; version 5.7 only

Published 2003-08-27. Last modified 2026-06-16.