CVE-2008-4402 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Micro Officescan

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
15.6%
top 5.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Trend Micro Officescan
Timeline
PublishedOct 3
Latest updateMay 2

Description

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-59jh-qxwp-hpc6: Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8↗2022-05-02
▶
CVEList
CVE-2008-4402: Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8↗2008-10-03
▶
CVE-2008-4402 — Trend Micro Officescan vulnerability | cvebase