Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."
| Software | From | Fixed in |
|---|---|---|
| trend_micro / officescan | 7.3 | 7.3.x |
| trend_micro / officescan | 8.0-sp1 | 8.0-sp1.x |