Trend Micro Internet Security 2008 vulnerabilities

3 CVEs affecting Trend Micro Internet Security 2008, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3866, published 2009-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3865, published 2009-01-21. High severity, CVSS 10.0. EPSS: 6.4% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0…
CVE-2008-3864, published 2009-01-21. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007…
CVE-2008-3866, published 2009-01-21. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and…