CVE-2017-14089

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues...

CVE-2017-14089

CVE-2017-14089 affects Trend Micro OfficeScan 11.0 and XG (12.0). The vulnerability is described as an unauthorized remote memory corruption in the CGI component cgiShowClientAdm.exe, exploitable by an unauthenticated attacker over the network to cause memory corruption (potential denial of servi...

CVE-2017-14086

CVE-2017-14086 describes a pre-auth vulnerability in Trend Micro OfficeScan 11.0 and XG (12.0) where unauthenticated actors who can reach the OfficeScan server may trigger the fcgiOfcDDA.exe process or induce INI corruption, potentially causing disk space exhaustion from dump files due to continu...

CVE-2017-14085

Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules...

CVE-2017-14088

Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain th...

CVE-2017-14085

CVE-2017-14085 affects Trend Micro OfficeScan 11.0 and XG (12.0) where unauthenticated remote access can query the network NT domain or PHP version/modules via a web-facing OfficeScan server. The CVE is documented as an information-disclosure vulnerability with unauthorized access to server-side ...

CVE-2017-14084

Trend Micro OfficeScan 11.0 and XG/12.0 are affected by a Man-in-the-Middle (MITM) remote code execution vulnerability. Public NASL/Nessus entries describe a remote memory corruption/RCE condition tied to OfficeScan components (e.g., cgiShowClientAdm.exe) caused by improper input handling, enabli...

CVE-2017-14087

CVE-2017-14087 is a Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) and OfficeScan 11.x. Public materials in the provided documents indicate affected versions include OfficeScan 11.x pre-CP 6426 SP1 and 12.x pre-CP 1708. The issue allows an attacker to spoof the Host heade...

PT-2017-13240

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 and XG Description A vulnerability in Trend Micro OfficeScan allows remote unauthenticated users who can access the system to download the OfficeScan encryption file. Recommendations For Trend Micro...

PT-2017-13243

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan XG version 12.0 Description A Host Header Injection issue may allow an attacker to spoof a particular Host header, enabling the rendering of arbitrary links that point to a malicious website with poisoned Host header...

PT-2017-13241

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 Description A potential Man-in-the-Middle MitM attack issue may allow attackers to execute arbitrary code on vulnerable installations. Recommendations For Trend Micro OfficeScan version 11.0, at the moment,...

PT-2017-13242

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 and XG Description The issue allows unauthenticated users who can access the OfficeScan server to disclose sensitive information, including querying the network's NT domain or the PHP version and modules...

Trend Micro OfficeScan Server Request Forgery Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. A server request forgery vulnerability exists in Trend...

Trend Micro OfficeScan 11.0/XG (12.0) - Memory Corruption Exploit

Exploit for windows platform in category dos / poc + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt + ISR: ApparitionSec Vendor:...

Trend Micro OfficeScan Information Disclosure Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. An information disclosure vulnerability exists in Trend...

Trend Micro OfficeScan Buffer Overflow Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A buffer overflow vulnerability exists in Trend Micro OfficeScan version 11.0 and XG. A local attacker could exploit this vulnerability to execute arbitrary code and elevate privileges...

Trend Micro OfficeScan 11.0/XG (12.0) - Image File Execution Bypass Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-IMAGE-FILE-EXECUTION-BYPASS.txt + ISR: ApparitionSec Vendor: ==================...

Trend Micro OfficeScan 11.0/XG (12.0) - Image File Execution Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-IMAGE-FILE-EXECUTION-BYPASS.txt + ISR: ApparitionSec Vendor: ================== www.trendmicro.com Product: ======== OfficeScan v11.0 and XG 12.0...

Trend Micro OfficeScan 11.0/XG (12.0) - Information Disclosure

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt + ISR: ApparitionSec Vendor: ================== www.trendmicro.com Product: ===========...

PT-2017-3010

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 and XG Description The issue is related to resource management errors. It may allow a remote attacker with access to the OfficeScan server to execute the fcgiOfcDDA.exe executable or cause potential INI fil...