Stack-Based Buffer Overflow in Trend Micro OfficeScan Products

CVE-2008-2437

Summary

A stack-based buffer overflow occurs in cgiRecvFile.exe within Trend Micro OfficeScan versions 7.3 patch 4, 8.0, and 8.0 SP1, as well as Client Server Messaging Security 3.6. This vulnerability can be exploited by remote attackers sending specially crafted HTTP requests with excessively long ComputerName parameters, potentially allowing them to execute arbitrary code on the affected systems. It is crucial for organizations using these products to implement necessary patches and safeguard their networks.

References