CVE Catalog

CVE-2017-14089

Critical
Published: Translated: NVD NIST

Summary

Trend Micro OfficeScan 11.0 and XG have an Unauthorized Memory Corruption vulnerability that may allow remote unauthenticated users to access the OfficeScan server and target cgiShowClientAdm.exe, leading to memory corruption issues.

Risk Assessment

The organization may be exposed to attacks that could lead to system instability and potential data loss.

Recommendation

It is recommended to update to the latest version of Trend Micro OfficeScan and implement appropriate security measures to restrict access to the server.

Original NVD description (English source)

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS