The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the error handling mechanism.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Officescan | Trend_micro | 8.0-sp1 (including) | 8.0-sp1 (including) |
| Officescan | Trend_micro | 8.0-sp1_patch1 (including) | 8.0-sp1_patch1 (including) |