CVE:CVE-2007-0325
CNNVD:CNNVD-200702-351
OfficeScanSetupINI.dll的Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX控件中存在多个缓冲区溢出。当在OfficeScan Build 1344版本之前的7.0版本, OfficeScan Build 1241版本之前的7.3版本以及Client / Server / Messaging Security Build 1197版本之前的3.0版本中运行时，远程攻击者可以借助一个特制的HTML文件，执行任意代码。
solution:Upgrade trend_micro client-server-messaging_security to a higher version than 3.0,and avoid the version 3.0; Upgrade trend_micro officescan_corporate_edition to a higher version than 7.0,7.3,and avoid the version 7.0,7.3