VULNERABILITY INTELLIGENCE
CVE-2017-14089
CVSS score9.8 CRITICAL
EPSS probability9.78%
CISA KEVNot currently listed
Published2017-10-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- security@trendmicro.com — Exploit, Third Party Advisory
- security@trendmicro.com — Exploit, Third Party Advisory, VDB Entry
- security@trendmicro.com — Mailing List, Third Party Advisory, VDB Entry
- security@trendmicro.com
- security@trendmicro.com — Third Party Advisory, VDB Entry
- security@trendmicro.com — Third Party Advisory, VDB Entry
- security@trendmicro.com — Patch, Vendor Advisory
- security@trendmicro.com — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108