SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2007-0325

Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0…

HIGH 9.3EPSS 34.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 34.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to execute arbitrary code via a crafted HTML document.

CVSS 2.0
9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
34.01% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
trend micro/client-server-messaging security · trend micro/officescan corporate edition
Source
cret@cert.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.