CVE-2008-4403: Null Pointer Dereference

Published Oct 3, 2008

Updated

The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism."

Affected Software

2 affected components

Trend Micro OfficeScan=8.0-sp1_patch1

Trend Micro OfficeScan=8.0-sp1

Event History

Oct 3, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4403?

CVE-2008-4403 is considered a medium severity vulnerability due to its potential for denial of service.

How do I fix CVE-2008-4403?

To fix CVE-2008-4403, you should update Trend Micro OfficeScan to build 2439 or later for 8.0 SP1 and apply Patch 1.

What does CVE-2008-4403 affect?

CVE-2008-4403 affects Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087.

What type of attack does CVE-2008-4403 involve?

CVE-2008-4403 involves a denial of service attack through crafted HTTP headers causing a NULL pointer dereference.

When was CVE-2008-4403 discovered?

CVE-2008-4403 was publicly disclosed in 2008.