CVE-2008-4403 The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference an...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro officescan | = 8.0-sp1 | No fix listed |
| trend micro officescan | = 8.0-sp1_patch1 | No fix listed |
References
- 32097 third-party-advisory vendor-advisory
- 31531 vdb-entry
- 1020974 vdb-entry
- www.trendmicro.com
- www.trendmicro.com
- ADV-2008-2712 vdb-entry
- trendmicro-officescan-cgi-unspecified-bo(45599) vdb-entry