CVE-2017-14086

HIGH

Trend Micro OfficeScan 11.0 - Use After Free

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-14086. PoCs published by hyp3rlinx.

AI-analyzed exploit summary The exploit demonstrates unauthenticated remote process execution and denial-of-service via direct HTTP requests to vulnerable Trend Micro OfficeScan XG endpoints. It triggers the execution of 'fcgiOfcDDA.exe' and causes INI corruption via 'cgiRqUpd.exe'.

Description

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.

Exploits (1)

exploitdb WORKING POC VERIFIED
by hyp3rlinx · textwebappswindows
https://www.exploit-db.com/exploits/42892

The exploit demonstrates unauthenticated remote process execution and denial-of-service via direct HTTP requests to vulnerable Trend Micro OfficeScan XG endpoints. It triggers the execution of 'fcgiOfcDDA.exe' and causes INI corruption via 'cgiRqUpd.exe'.

Classification
Working Poc 90%
Attack Type
Rce | Dos
Complexity
Trivial
Reliability
Reliable
Target: Trend Micro OfficeScan XG v11.0 and 12.0
No auth needed
Prerequisites: Network access to the target's OfficeScan XG server on port 4343
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Patch, Vendor Advisory x_refsource_confirm
https://success.trendmicro.com/solution/1118372
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42892/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/541274/100/0/threaded
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2017/Sep/88
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1039500
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101076

Scores

CVSS v3 7.5
EPSS 0.0791
EPSS Percentile 94.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (3)
Trend Micro/Trend Micro OfficeScan 11.0, XG (12.0)
trendmicro/officescan 11.0 sp1
trendmicro/officescan 12.0
Published Oct 06, 2017
Tracked Since Feb 18, 2026