CVE-2008-1365
Severity:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
17/03/2008
Last modified:
08/03/2011
Description
Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors.
Impact
Base Score 2.0
6.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:* | 7.3_patch3_build1314 (including) | |
cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:* | 8.0_patch2_build1189 (including) |
To consult the complete list of CPE names with products and versions, see this page