Description
Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remote Client Install name search".
References
- http://www.layereddefense.com/TREND01OCT.html
- ADV-2006-3870 vdb-entry
- officescan-atxconsole-format-string(29308) vdb-entry
- 1016963 vdb-entry
- VU#788860 third-party-advisory
- 20284 vdb-entry
- 20061001 Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability mailing-list
- 1682 third-party-advisory
- 22224 third-party-advisory