CVE-2007-0325: Buffer Overflow

Published Feb 20, 2007

Updated

Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to execute arbitrary code via a crafted HTML document.

Affected Software

3 affected components

Trend Micro OfficeScan Corporate Edition=7.0

Trend Micro OfficeScan Corporate Edition=7.3

Trend Micro Client-server-messaging Security=3.0

Remediation

Patch Available

http://secunia.com/advisories/24193

Event History

Feb 20, 2007

CVE Published

05:28 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0325?

CVE-2007-0325 is classified as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-0325?

To fix CVE-2007-0325, update the affected Trend Micro OfficeScan and Client/Server/Messaging Security versions to the latest patched builds.

What versions are affected by CVE-2007-0325?

CVE-2007-0325 affects Trend Micro OfficeScan versions 7.0 before Build 1344, 7.3 before Build 1241, and Client/Server/Messaging Security version 3.0 before Build 1197.

What types of vulnerabilities are associated with CVE-2007-0325?

CVE-2007-0325 is associated with buffer overflow vulnerabilities that can be exploited remotely.

Who can be impacted by CVE-2007-0325?

Users of the affected versions of Trend Micro OfficeScan and Client/Server/Messaging Security may be impacted by CVE-2007-0325.