$ cve CVE-2008-3364 JSON

CVE-2008-3364 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 32.8% (pctl 98)

Patch early

A public exploit exists.

Description

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security (CSM) 3.5 and 3.6; and Worry-Free Business Security (WFBS) 5.0 allows remote attackers to execute arbitrary code via a long string in the Server property, and possibly other properties. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	32.81% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2008-07-30
Last modified	2026-06-16

Affected (1)

Vendor	Product
trend micro	officescan

Public exploits

Source	Title	Date
exploit-db	Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow	2008-07-28

References

→ the Explorer · watch your stack · NVD