CVE-2008-1366-漏洞详情

[原文]Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request without a Content-Length header or (2) invalid characters in unspecified CGI arguments, which triggers a NULL pointer dereference.

[CNNVD]Trend Micro OfficeScan 拒绝服务漏洞(CNNVD-200803-255)

        Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189及其早期版本, 和7.3 Patch 3 build 1314及其早期版本，远程攻击者通过(1) 一个没有Content-Length 头的 HTTP 请求，或 (2) 可以触发一个NULL指示器解除参照的未明CGI 变量中的无效字符，以造成拒绝服务(程序损耗)。