Vulnerability in Trend Micro Client-Server-Messaging Security
CVE-2007-0856
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Client-server-messaging_security — versions 3.5
- Trend_micro Damage_cleanup_services — versions 3.2
- Trend_micro Pc-cillin_internet_security — versions 2007
- Trend_micro Tmcomm.sys — versions 1.5.1052
- Trend_micro Trend_micro_antirootkit_common_module
- Trend_micro Trend_micro_antispyware — versions 3.0_sp2, 3.2_sp1, 3.5
- Trend_micro Trend_micro_antivirus — versions 2007
- Trend_micro Vsapini.sys — versions 3.320.1003
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)