A vulnerability has been reported in Trend Micro OfficeScan Corporate Edition, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a format string error within the "ATXCONSOLE.OCX" ActiveX Control. This can potentially be exploited to execute arbitrary code by sending a specially crafted string back to the Management Console's Remote Client Install name search.

The vulnerability has been reported in Trend Micro OfficeScan Corporate Edition 7.3. Other versions may also be affected.

Solution
Reportedly, this has been fixed in OfficeScan Corporate Edition 7.3 Patch 1.

Provided and/or discovered by
Deral Heiland, Layered Defense

Changelog
Further details available in Customer Area

Original Advisory
http://www.layereddefense.com/TREND01OCT.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area