CVE-2008-0012 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Micro Serverprotect

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
18.0%
top 4.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Trend Micro Serverprotect
Timeline
PublishedNov 17
Latest updateMay 1

Description

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0013 and CVE-2008-0014.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDtrend_micro/serverprotect5.58, 5.7+1

🔴Vulnerability Details

2
GHSA
GHSA-gpjm-87qv-p73g: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5↗2022-05-01
▶
CVEList
CVE-2008-0012: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5↗2008-11-17
▶
CVE-2008-0012 — Trend Micro Serverprotect vulnerability | cvebase