CVE-2007-3454 Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted requests, as demonstr...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted requests, as demonstrated using a long session cookie to unspecified CGI programs that use this library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro officescan | = 7.3 | No fix listed |
| trend micro officescan | = 8.0 | No fix listed |
References
- 20070716 Trend Micro OfficeScan Session Cookie Buffer Overflow Vulnerability third-party-advisory
- 36629 vdb-entry
- 25778 patch third-party-advisory vendor-advisory
- 1018320 vdb-entry
- 24641 vdb-entry
- www.trendmicro.com
- ADV-2007-2330 vdb-entry
- officescan-cgiocommon-bo(35051) vdb-entry