CVE-2017-14086: trend micro trend micro officescan Uncontrolled Resource Consumption
Vulnerability summary
CVE-2017-14086 is a high (CVSS 7.8) Uncontrolled Resource Consumption vulnerability in trend micro trend micro officescan. EPSS estimates a 7.91% chance of exploitation in the next 30 days, higher than 94.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 05-10-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
7.91%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 7.91% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (hyp3rlinx.altervista.org)
Maturity: unknown
Trend Micro OfficeScan 11.0/XG (12.0) - Code Execution / Memory Corruption
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Trend micro1 product
- trend micro officescan11.0, XG (12.0)
Trendmicro1 product
- officescan11.0:sp1 | 12.0
2 vendors · 2 products