High severity7.5NVD Advisory· Published Oct 6, 2017· Updated Jun 17, 2026
CVE-2017-14086
CVE-2017-14086
Description
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*
- (no CPE)range: 11.0 and XG
- Trend Micro/Trend Micro OfficeScanv5Range: 11.0, XG (12.0)
Patches
Vulnerability mechanics
References
8- success.trendmicro.com/solution/1118372nvdPatchVendor Advisory
- hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txtnvdExploitThird Party Advisory
- packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2017/Sep/88nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/101076nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039500nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/42892/nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/541274/100/0/threadednvd
News mentions
0No linked articles in our index yet.