CVE-2017-14089: Buffer Overflow

Published Oct 5, 2017

Updated

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.

Affected Software

2 affected components

trendmicro Officescan=11.0-sp1

trendmicro Officescan=12.0

Remediation

Patch Available

https://success.trendmicro.com/solution/1118372

Event History

Oct 5, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-14089?

CVE-2017-14089 is rated as a high severity vulnerability due to the potential for unauthorized memory corruption.

How do I fix CVE-2017-14089?

To fix CVE-2017-14089, apply the latest patches and updates from Trend Micro for OfficeScan 11.0 and 12.0.

Who is affected by CVE-2017-14089?

CVE-2017-14089 affects users of Trend Micro OfficeScan versions 11.0 (SP1) and 12.0.

What impact does CVE-2017-14089 have?

CVE-2017-14089 can lead to memory corruption, potentially allowing remote unauthenticated access to exploit the vulnerability.

Is CVE-2017-14089 remotely exploitable?

Yes, CVE-2017-14089 can be exploited remotely by unauthenticated users with access to the OfficeScan server.