CVE-2017-14089: Buffer Overflow
First published: Thu Oct 05 2017(Updated: )
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro OfficeScan | =11.0-sp1 | |
| Trend Micro OfficeScan | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt
- http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Corruption.html
- http://seclists.org/fulldisclosure/2017/Sep/91
- http://www.securityfocus.com/archive/1/541271/100/0/threaded
- http://www.securityfocus.com/bid/101076
- http://www.securitytracker.com/id/1039500
- https://success.trendmicro.com/solution/1118372
- https://www.exploit-db.com/exploits/42920/
Frequently Asked Questions
What is the severity of CVE-2017-14089?
CVE-2017-14089 is rated as a high severity vulnerability due to the potential for unauthorized memory corruption.
How do I fix CVE-2017-14089?
To fix CVE-2017-14089, apply the latest patches and updates from Trend Micro for OfficeScan 11.0 and 12.0.
Who is affected by CVE-2017-14089?
CVE-2017-14089 affects users of Trend Micro OfficeScan versions 11.0 (SP1) and 12.0.
What impact does CVE-2017-14089 have?
CVE-2017-14089 can lead to memory corruption, potentially allowing remote unauthenticated access to exploit the vulnerability.
Is CVE-2017-14089 remotely exploitable?
Yes, CVE-2017-14089 can be exploited remotely by unauthenticated users with access to the OfficeScan server.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/author
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trendmicro
- canonical/trend micro officescan
- version/trend micro officescan/11.0-sp1
- version/trend micro officescan/12.0