Trend Micro OfficeScan 'cgiRecvFile.exe' Buffer Overflow

Trend Micro OfficeScan or Client Server Messaging Security is installed on the remote host. The installed version is affected by a buffer overflow vulnerability. By setting the parameter ‘ComputerName’ to a very long string in a specially crafted HTTP request, a malicious user within the local network may be able to trigger a stack-based overflow in ‘cgiRecvFile.exe’. Exploitation of this issue requires manipulation of the parameters ‘TempFileName’, ‘NewFileSize’, and ‘Verify’ and, if successful, would result in arbitrary code execution on the remote system.