critical9.3Public exploit code
CVE-2007-0325
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro OfficeScan - Client ActiveX Control Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
Impact
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to execute arbitrary code via a crafted HTML document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Client-Server-Messaging Security | Version 3.0 |
| Trend Micro | Officescan Corporate Edition | Versions 7.0, 7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034288
- http://osvdb.org/33040
- http://secunia.com/advisories/24193
- http://www.kb.cert.org/vuls/id/784369
- http://www.securityfocus.com/bid/22585
- http://www.securitytracker.com/id?1017664
- http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1344_readme.txt
- http://www.vupen.com/english/advisories/2007/0638
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034288
- http://osvdb.org/33040
- http://secunia.com/advisories/24193
- http://www.kb.cert.org/vuls/id/784369
- http://www.securityfocus.com/bid/22585
- http://www.securitytracker.com/id?1017664
- http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1344_readme.txt
- http://www.vupen.com/english/advisories/2007/0638