CVE-2008-3862: Trend Micro OfficeScan

High severity, CVSS 10.0. EPSS: 18.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."

Affected products

• Trend Micro OfficeScan: version 7.3 only; version 8.0 only

Published 2008-10-23. Last modified 2026-06-16.