System7 » exploit http://www.system7.org Spread the word, information is free. Mon, 16 Jan 2012 13:24:39 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Trend Officescan – Proof of concept http://www.system7.org/2009/06/06/trend-officescan-proof-of-concept/ http://www.system7.org/2009/06/06/trend-officescan-proof-of-concept/#comments Sat, 06 Jun 2009 19:19:29 +0000 . http://www.system7.org/?p=206 Continue reading →]]> In April a Trend vulnerability was discovered.  The Trend real time scan service can be exploited by running a scan on a long directory name.  It’s surprising that this vulnerability was discovered and yet is still exploitable in the latest release of Trend — which I’ve confirmed today.  What’s neat is someone who only has user level privilege on a machine would be able to halt the Trend service and then potentially run some nasty code.

Here’s a VB project that will generate a long directory name and then attempt to run the scan: Trend POC (I’ve also compiled the source for those who don’t have VB — rename the .exe_ to .exe)

I’m running AVG Free on my Windows machine and happy with that.

]]> http://www.system7.org/2009/06/06/trend-officescan-proof-of-concept/feed/ 0