CVE:CVE-2008-2437
CNNVD:CNNVD-200809-213
Trend Micro OfficeScan 7.3 补丁 4 build 1362,OfficeScan 8.0 和 8.0 SP1, 以及 Client Server Messaging Security 3.6及其他构造的cgiRecvFile.exe中存在基于栈缓冲区溢出。远程攻击者通过提交一个包含长的ComputerName参数的HTTP请求来执行任意代码。
solution:Upgrade trend_micro client-server-messaging_security to a higher version than 2.0,3.0,3.5,3.6,and avoid the version 2.0,3.0,3.5,3.6; Upgrade trend_micro officescan to a higher version than 7.0,7.3,7.3:patch_4,8.0,8.0:sp1,and avoid the version 7.0,7.3,7.3:patch_4,8.0,8.0:sp1