CVE-2007-3454: Trend Micro OfficeScan

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted requests, as demonstrated using a long session cookie to unspecified CGI programs that use this library.

Affected products

• Trend Micro OfficeScan: version 7.3 only; version 8.0 only

Published 2007-06-27. Last modified 2026-06-16.