CVE-2007-0856

Опубликовано: 08 фев. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.

Ссылки

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469
Vendor Advisory
http://osvdb.org/33039
http://secunia.com/advisories/24069
Patch
Vendor Advisory
http://securitytracker.com/id?1017604
http://securitytracker.com/id?1017605
http://securitytracker.com/id?1017606
http://www.kb.cert.org/vuls/id/282240
US Government Resource
http://www.kb.cert.org/vuls/id/666800
US Government Resource
http://www.securityfocus.com/bid/22448
http://www.vupen.com/english/advisories/2007/0521
https://exchange.xforce.ibmcloud.com/vulnerabilities/32353
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469
Vendor Advisory
http://osvdb.org/33039
http://secunia.com/advisories/24069
Patch
Vendor Advisory
http://securitytracker.com/id?1017604
http://securitytracker.com/id?1017605
http://securitytracker.com/id?1017606
http://www.kb.cert.org/vuls/id/282240
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:smb:*:*:*:*:*

cpe:2.3:a:trend_micro:damage_cleanup_services:3.2:*:*:*:*:*:*:*

cpe:2.3:a:trend_micro:pc-cillin_internet_security:2007:*:*:*:*:*:*:*

cpe:2.3:a:trend_micro:tmcomm.sys:1.5.1052:*:*:*:*:*:*:*

cpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:*

cpe:2.3:a:trend_micro:trend_micro_antispyware:3.0_sp2:*:enterprise:*:*:*:*:*

cpe:2.3:a:trend_micro:trend_micro_antispyware:3.2_sp1:*:smb:*:*:*:*:*

cpe:2.3:a:trend_micro:trend_micro_antispyware:3.5:*:consumer:*:*:*:*:*

cpe:2.3:a:trend_micro:trend_micro_antivirus:2007:*:*:*:*:*:*:*

cpe:2.3:a:trend_micro:vsapini.sys:3.320.1003:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.0015

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8whq-qmmg-8jxf

github

почти 4 года назад

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.