Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-1365

Опубликовано: 17 мар. 2008
Источник: nvd
CVSS2: 6.4
EPSS Высокий

Описание

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*
Версия до 7.3_patch3_build1314 (включая)
cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*
Версия до 8.0_patch2_build1189 (включая)

EPSS

Процентиль: 99%
0.75208
Высокий

6.4 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
почти 4 года назад

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors.

EPSS

Процентиль: 99%
0.75208
Высокий

6.4 Medium

CVSS2

Дефекты

CWE-119