CVE-2017-14089

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

9.78% chance of exploitation in the next 30 days, 95th percentile

Published

2017-10-05

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AU…
• http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Cor…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42920

References

• CVE Record
• NVD entry

Related

• CVE-2017-14087
• CVE-2017-14090
• CVE-2017-14086
• CVE-2017-14091
• CVE-2017-14085
• CVE-2017-14092