CVE-2011-5001

Trend Micro Control Manager < 5.5 - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18514
metasploit WORKING POC GOOD
by Luigi Auriemma, Blue · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/trendmicro_cmdprocessor_addtask.rb

Scores

EPSS 0.7200
EPSS Percentile 98.8%

Details

CWE
CWE-119
Status published
Products (1)
trend_micro/control_manager < 5.5
Published Dec 25, 2011
Tracked Since Feb 18, 2026