Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Trend Micro OfficeScan can be hijacked via web installer

CVE-2006-6179 · published 19 years ago
Summary

The web‑based installer component in Trend Micro OfficeScan versions before build 7.3.0.1089 can be tricked into running unwanted code. An attacker who can reach this component could take control of the affected system. Update OfficeScan to the latest build or apply the vendor’s patch to stop this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
trend_micro officescan 7.3
cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown atta...
Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Timeline
Published30 Nov 2006
Updated28 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-6179 · NVD
Track software like this
Free during beta