CVE-2017-14086

概要

参考情報

• hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt · Exploit
• packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html · Third Party Advisory
• seclists.org/fulldisclosure/2017/Sep/88 · Mailing List
• securityfocus.com/archive/1/541274/100/0/threaded
• securityfocus.com/bid/101076 · Third Party Advisory
• securitytracker.com/id/1039500 · Third Party Advisory
• success.trendmicro.com/solution/1118372 · Patch
• exploit-db.com/exploits/42892 · Third Party Advisory

officescan のその他の脆弱性

• CVE-2021-32465高 8.8An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote…
• CVE-2021-32464高 7.8An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business…
• CVE-2021-36742高 7.8悪用確認済み（CISA KEV）A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.…
• CVE-2021-36741高 8.8悪用確認済み（CISA KEV）An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1…
• CVE-2021-28646中 5.5An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker…