CVE-2008-2435

Published: Dec 23, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function.

Affected (2)

Products: Trend Micro: Housecall

Trend Micro

1 product

Housecall

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Trend Micro Housecall	Version 6.51.0.1028
Trend Micro Housecall	Version 6.6.0.1278

Related CWEs

CWE-399

References (20)

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/31583

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2008-34/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://securitytracker.com/id?1021481

Source: PSIRT-CNA@flexerasoftware.com

http://www.kb.cert.org/vuls/id/702628

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.osvdb.org/50843

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/499478/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/32950

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/3464

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/47523

Source: PSIRT-CNA@flexerasoftware.com

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646