CVE-2008-1365: Buffer Overflow
Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1365?
CVE-2008-1365 is considered critical due to the potential for remote code execution and denial of service.
How do I fix CVE-2008-1365?
To fix CVE-2008-1365, update to the latest version of Trend Micro OfficeScan Corporate Edition that is not affected by this vulnerability.
Who is affected by CVE-2008-1365?
CVE-2008-1365 affects users of Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier.
What is a stack-based buffer overflow in the context of CVE-2008-1365?
In the context of CVE-2008-1365, a stack-based buffer overflow occurs when a long encrypted password exceeds the allocated memory space, potentially allowing malicious code execution.
Can CVE-2008-1365 cause service interruptions?
Yes, CVE-2008-1365 can cause service interruptions as it may lead to a denial of service attack, crashing the application.