Unrated severityNVD Advisory· Published Sep 16, 2008· Updated Jun 16, 2026
CVE-2008-2437
CVE-2008-2437
Description
Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:trend_micro:client-server-messaging_security:2.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:trend_micro:client-server-messaging_security:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:client-server-messaging_security:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:client-server-messaging_security:3.6:*:*:*:*:*:*:*
- (no CPE)range: 3.6
cpe:2.3:a:trend_micro:officescan:7.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:trend_micro:officescan:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:officescan:7.3:patch_4:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:officescan:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*
- (no CPE)range: 7.3 patch 4 build 1362, 7.3 other builds, 8.0, 8.0 SP1
Patches
Vulnerability mechanics
References
13- www.securityfocus.com/bid/31139nvdPatch
- secunia.com/advisories/31342nvdVendor Advisory
- secunia.com/secunia_research/2008-35/nvdVendor Advisory
- securityreason.com/securityalert/4263nvd
- www.securityfocus.com/archive/1/496281/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.trendmicro.com/ftp/documentation/readme/CSM_3.6_OSCE_7.6_Win_EN_CriticalPatch_B1195_readme.txtnvd
- www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1367_readme.txtnvd
- www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Patch1_Win_EN_CriticalPatch_B3060_readme.txtnvd
- www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2424_readme.txtnvd
- www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_Win_EN_CriticalPatch_B1361_readme.txtnvd
- www.vupen.com/english/advisories/2008/2555nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/45072nvd
News mentions
0No linked articles in our index yet.