• info
• discussion
• exploit
• solution
• references

Trend Micro OfficeScan 'cgiRecvFile.exe' Buffer Overflow Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.


Trend Micro OfficeScan 8.0

• Trend Micro OSCE_8.0_SP1_Patch1_Win_EN_CriticalPatch_B3060.exe
  Trend Micro OfficeScan 8.0 Service Pack 1 Patch 1
  http://www.trendmicro.com/ftp/products/patches/OSCE_8.0_SP1_Patch1_Win _EN_CriticalPatch_B3060.exe


• Trend Micro OSCE_8.0_SP1_Win_EN_CriticalPatch_B2424.exe
  Trend Micro OfficeScan 8.0 Service Pack 1.
  http://www.trendmicro.com/ftp/products/patches/OSCE_8.0_SP1_Win_EN_Cri ticalPatch_B2424.exe


• Trend Micro OSCE_8.0_Win_EN_CriticalPatch_B1361.exe
  Trend Micro OfficeScan 8.0
  http://www.trendmicro.com/ftp/products/patches/OSCE_8.0_Win_EN_Critica lPatch_B1361.exe

Trend Micro Client Server Messaging Security 3.6

• Trend Micro CSM_3.6_OSCE_7.6_Win_EN_CriticalPatch_B1195.exe
  Trend Micro Client Server Messaging Security 3.6
  http://www.trendmicro.com/ftp/products/patches/CSM_3.6_OSCE_7.6_Win_EN _CriticalPatch_B1195.exe

Trend Micro OfficeScan 7.3

• Trend Micro OSCE_7.3_Win_EN_CriticalPatch_B1367.exe
  Trend Micro OfficeScan 7.3
  http://www.trendmicro.com/ftp/products/patches/OSCE_7.3_Win_EN_Critica lPatch_B1367.exe