cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2007-4277,https://securityvulnerability.io/vulnerability/CVE-2007-4277,,"The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality.  NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.",Trend Micro,"Pc-cillin Internet Security 2007,Scan Engine",,,0.0004199999966658652,false,false,false,false,,false,false,2007-10-30T22:00:00.000Z,0
CVE-2007-3873,https://securityvulnerability.io/vulnerability/CVE-2007-3873,,"Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.",Trend Micro,"Pc-cillin Internet Security 2007,Antispyware",,,0.0004199999966658652,false,false,false,false,,false,false,2007-08-22T23:17:00.000Z,0