CVE-2009-1435

Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 - Denial of Service via Long Pathname

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-1435. PoCs published by Juan Pablo Lopez Yacubian.

AI-analyzed exploit summary The exploit describes a denial-of-service vulnerability in Trend Micro OfficeScan Client due to improper handling of nested directories with excessively long names. The issue may lead to a crash, with potential for code execution, though unconfirmed.

Description

NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Juan Pablo Lopez Yacubian · textdoswindows

https://www.exploit-db.com/exploits/32939

View Code ZIP pw:eip

The exploit describes a denial-of-service vulnerability in Trend Micro OfficeScan Client due to improper handling of nested directories with excessively long names. The issue may lead to a crash, with potential for code execution, though unconfirmed.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Theoretical

Target: Trend Micro OfficeScan Client 8.0 SP1

No auth needed

Prerequisites: Access to create nested directories with long names on the target system

MITRE ATT&CK