Vulnerability Details : CVE-2008-3862

Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."

Vulnerability category: OverflowExecute code

Published 2008-10-23 22:00:01

Updated 2018-10-11 20:50:03

Source Flexera Software LLC

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2008-3862

Probability of exploitation activity in the next 30 days: 54.96%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2008-3862

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-3862

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: [email protected] (Primary)

References for CVE-2008-3862

Products affected by CVE-2008-3862

Trend Micro » Officescan » Version: 7.3
cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*
Matching versions
Trend Micro » Officescan » Version: 8.0 Update SP1
cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*
Matching versions