Trend Micro Interscan Messaging Security Suite vulnerabilities

3 CVEs affecting Trend Micro Interscan Messaging Security Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-0851, published 2007-02-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0851, published 2007-02-08. High severity, CVSS 9.3. EPSS: 8.4% chance of exploitation in the next 30 days. Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to…
CVE-2005-0533, published 2005-05-02. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with…
CVE-2006-0642, published 2006-02-10. Medium severity, CVSS 5.1. EPSS: 1.9% chance of exploitation in the next 30 days. Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted…