CVE-2006-5157: Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edit...

Security readout for executives and security teams

This is an old remote code execution issue in Trend Micro OfficeScan Corporate Edition before 7.3 Patch 1. A vulnerable ActiveX control could mishandle text entered into the Management Console's remote client install name search. If reachable and used, it could let an attacker run code. The provided sources do not show CISA KEV listing or current active exploitation. Likely exposure is limited to legacy Trend Micro OfficeScan Corporate Edition deployments before 7.3 Patch 1 where the vulnerable ATXCONSOLE.OCX control and management console workflow remain accessible. Modern environments are unlikely to be affected unless old management components persist on administrator workstations or servers. Prioritize if legacy OfficeScan management infrastructure still exists. The business risk is code execution through administrative security tooling, but the issue is from 2006 and evidence does not show current active exploitation. If no affected legacy components remain, residual urgency is low. Mitigation focus: Identify any OfficeScan Corporate Edition systems older than 7.3 Patch 1.; Upgrade vulnerable OfficeScan Corporate Edition installations to 7.3 Patch 1 or later vendor-supported guidance.; Remove or disable obsolete ATXCONSOLE.OCX components where no longer needed..

Prepared

Jun 29, 2026, 10:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.