Solution Details

[Hot Fix] B1089 - The OfficeScan 7.3 CgiRemoteInstall.exe file may have buffer overflow vulnerability

Solution ID:	1031753
Product:	OfficeScan - 7.3
Operating System:	Windows 2000 Server - SP2, Windows NT 4.0, SP 6a, Windows Server 2003 Standard Edition, Windows XP - SP1
Published:	6/29/06 11:59 PM

Problem:

The OfficeScan CgiRemoteInstall.exe component in the \PCCSRV\Web_console\RemoteInstallCGI folder may have buffer overflow vulnerability. When this vulnerability is exploited, it is possible to execute codes on the OfficeScan server.

Solution:

Hot Fix Overview

Hot fix - build 1089 prevents buffer overflows from occurring in the OfficeScan server.


NOTICE: This hot fix was developed as a workaround or solution to a customer-reported problem. As such, this hot fix has received limited testing and has not been certified as an official product update. Consequently, THIS HOT FIX IS PROVIDED "AS IS". TREND MICRO MAKES NO WARRANTY OR PROMISE ABOUT THE OPERATION OR PERFORMANCE OF THIS HOT FIX NOR DOES IT WARRANT THAT THIS HOT FIX IS ERROR FREE. TO THE FULLEST EXTENT PERMITTED BY LAW, TREND MICRO DISCLAIMS ALL IMPLIED AND STATUTORY WARRANTIES, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE.
To resolve the issue:

1.	Request the OSCE_7.3_WIN_EN_HFB1089.exe file from Trend Micro Technical Support.
	Premium Support Program (PSP) clients can contact their Technical Account Manager (TAM) directly.

2.	Copy the hot fix file to a temporary folder
3.	Double-click the OSCE_7.3_WIN_EN_HFB1089.exe file. This automatically copies the hot fix modules to the correct destination.
4.	Update scan engine and virus pattern files.

For more information, refer to the attached Readme file.

Support