Back to CVE Browser

CVE-2007-3454

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0240%

EPSS Percentile2.72th

PublishedJun 27, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted requests, as demonstrated using a long session cookie to unspecified CGI programs that use this library.

Affected Platforms (CPE)

📦

Trend Micro

Officescan

= 7.3

📦

Trend Micro

Officescan

= 8.0

References & Advisories

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=559

🔗 http://osvdb.org/36629

🔗 http://secunia.com/advisories/25778

🔗 http://securitytracker.com/id?1018320

🔗 http://www.securityfocus.com/bid/24641

🔗 http://www.trendmicro.com/ftp/documentation/readme/osce_80_win_en_securitypatch_b1042_readme.txt

🔗 http://www.vupen.com/english/advisories/2007/2330

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35051

Related Vulnerabilities

CVE-2007-345510.0

cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the passwor...

CVE-2008-243710.0

Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 a...

CVE-2006-138110.0

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local use...

CVE-2008-440210.0

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 bef...