Trend Micro OfficeScan Wizard和CgiRemoteInstall远程缓冲区溢出漏洞

2006-12-08T00:00:00
ID SSV:750
Type seebug
Reporter Root
Modified 2006-12-08T00:00:00

Description

Trend Micro OfficeScan是流行的反病毒解决方案。

Trend Micro OfficeScan存在多个安全问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。

问题存在于"PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe"和"PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe"组件处理畸形参数时存在缓冲区溢出错误,提交精心构建的数据可能导致以应用服务程序进程权限执行任意指令。

Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 5.58 Trend Micro OfficeScan Corporate Edition 5.5 Trend Micro OfficeScan Corporate Edition 5.0 2 Trend Micro OfficeScan Corporate Edition 3.54 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Novell Netware 5.1 - Novell Netware 5.0 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 3.1.2 Trend Micro OfficeScan Corporate Edition 3.13 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.5 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.0 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 7.3

补丁下载:

Trend Micro OfficeScan Corporate Edition 7.3

Trend Micro Trend Micro OfficeScan osce_73_win_en_patch1.1 <a href="http://www.trendmicro.com/ftp/products/patches/osce_73_win_en_patch1.1.exe" target="_blank">http://www.trendmicro.com/ftp/products/patches/osce_73_win_en_patch1.1.exe</a>

Trend Micro OfficeScan Corporate Edition 6.5

Trend Micro Trend Micro OfficeScan OSCE_6.5_win_en_patch8 <a href="http://www.trendmicro.com/ftp/products/patches/OSCE_6.5_win_en_patch8.exe" target="_blank">http://www.trendmicro.com/ftp/products/patches/OSCE_6.5_win_en_patch8.exe</a>