Trend Micro OfficeScan - Buffer Overflow (Denial of Service) (PoC)

🗓️ 27 Feb 2008 00:00:00Reported by Luigi AuriemmaType

Trend Micro OfficeScan buffer overflow and denial of service vulnerabilit

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2008-1365	9 May 201000:00	–	circl
Check Point Advisories	Trend Micro OfficeScan CGI Password Decryption Buffer Overflow (CVE-2008-1365)	25 Nov 200900:00	–	checkpoint_advisories
CVE	CVE-2008-1365	17 Mar 200822:00	–	cve
Cvelist	CVE-2008-1365	17 Mar 200822:00	–	cvelist
Exploit DB	Trend Micro OfficeScan - Remote Stack Buffer Overflow (Metasploit)	9 May 201000:00	–	exploitdb
Kaspersky	KLA10370 DoS vulnerability in OfficeScan	17 Mar 200800:00	–	kaspersky
Metasploit	Trend Micro OfficeScan Remote Stack Buffer Overflow	9 Sep 200722:56	–	metasploit
NVD	CVE-2008-1365	17 Mar 200822:44	–	nvd
Packet Storm	Trend Micro OfficeScan Remote Stack Overflow	26 Nov 200900:00	–	packetstorm
Prion	Stack overflow	17 Mar 200822:44	–	prion

source: https://www.securityfocus.com/bid/28020/info

Trend Micro OfficeScan Corporate Edition is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Successful exploits may allow an attacker to execute arbitrary code with privileges of the user running the application. This may facilitate a complete compromise of vulnerable computers. Failed exploit attempts will likely result in denial-of-service conditions.

These issues affect the following:

OfficeScan Corporate Edition 8.0 Patch 2 Build 1189 and earlier
OfficeScan Corporate Edition 7.0 Patch 3 Build 1314 and earlier

Other Trend Micro products may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31310.zip

05 Feb 2014 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.4

EPSS0.51111