CVE:CVE-2008-3865
CNNVD:CNNVD-200901-236
Trend Micro Internet Security是美国趋势科技（Trend Micro）公司的一款网络安全软件。
Trend Micro Internet Security 防火墙服务(TmPfw.exe)的ApiThread()函数在处理发送给该服务(默认40000/TCP端口)的报文时存在缓冲区错误漏洞，在大小字段中包含有较小值的报文可以触发这个溢出，导致服务崩溃。
solution:Upgrade trend_micro internet_security_2007 to a higher version than *; Upgrade trend_micro internet_security_2008 to a higher version than 17.0.1224,and avoid the version 17.0.1224; Upgrade trend_micro officescan to a higher version than 8.0:sp1,and avoid the version 8.0:sp1