KLA10370 DoS vulnerability in OfficeScan

Multiple serious vulnerabilities have been found in OfficeScan. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited remotely via a specially designed password;
2. A NULL pointer can be exploited remotely via a specially designed request…

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

Trend-Micro-OfficeScan-Corporate-Edition

CVE list

CVE-2008-1366 warning

CVE-2008-1365 high

Solution

Update to latest version

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Trend Micro OfficeScan Corporate Edition 8.0 versions 8.0 patch 2 build 1189 and earlierTrend Micro OfficeScan Corporate Edition versions 7.3 patch 3 build 1314 and earlier