Login Request a demo
Unscored severity · published Oct 23, 2008
CVE-2008-3862
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110,…
–
CVSS
18.4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."
Exploitation
Is it being used?
Exploit prediction (EPSS)18.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trend Micro
7.3; 8.0 · source: NVD
Affected product
OF
Officescan
Trend Micro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3862
Patch
http://secunia.com/advisories/32005
Vendor Advisory
http://secunia.com/secunia_research/2008-40/
securityreason.com
http://securityreason.com/securityalert/4489
www.securityfocus.com
http://www.securityfocus.com/archive/1/497650/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/31859
www.securitytracker.com
http://www.securitytracker.com/id?1021093
More from Officescan
7.5
CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability
–
CVE-2008-3866
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet…
–
CVE-2008-3865
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend…
–
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and…
–
CVE-2008-4403
The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL…