CVE-2008-2435

CRITICO 9.3CVE-2008-2435 · Published 23/12/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
housecall trend_micro	`= 6.51.0.1028= 6.6.0.1278`	No fix yet

Description

Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function.

References

esupport.trendmicro.com/support/viewxml.do · Vendor Advisory
secunia.com/advisories/31583 · Vendor Advisory
secunia.com/secunia_research/2008-34 · Vendor Advisory
securitytracker.com/id
kb.cert.org/vuls/id/702628 · US Government Resource
osvdb.org/50843
securityfocus.com/archive/1/499478/100/0/threaded
securityfocus.com/bid/32950
vupen.com/english/advisories/2008/3464
exchange.xforce.ibmcloud.com/vulnerabilities/47523

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free