CVE-2011-5001

HighPublished

Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control...

Published: Dec 25, 2011
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: Feb 23, 2012

Primary CVSS

10.0/ 10High

nvd · CVSS 2.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS probability estimate

64.4%

High · next 30 days

Percentile: 99.2%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

TrendMicro Control Manger CmdProcessor.exe Stack Buffer OverflowModule
modules/exploits/windows/misc/trendmicro_cmdprocessor_addtask.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: 6144ecdd0f63Related tool
Declared conditions
- platform: Windows($.exploit_windows/misc/trendmicro_cmdprocessor_addtask.platform)
- verification: check_not_declared($.exploit_windows/misc/trendmicro_cmdprocessor_addtask.check)

Trend Micro Control Manger 5.5 - 'CmdProcessor.exe' Remote Stack Buffer Overflow (Metasploit)Exploit

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.