Trend Micro Pc-Cillin Internet Security 2007 vulnerabilities

2 CVEs affecting Trend Micro Pc-Cillin Internet Security 2007, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4277, published 2007-10-30.

More from Trend Micro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-3873, published 2007-08-22. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when…
• CVE-2007-4277, published 2007-10-30. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write)…