Описание
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.
Ссылки
- ExploitVendor Advisory
- ExploitThird Party Advisory
- https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/ExploitThird Party Advisory
- ExploitVendor Advisory
- ExploitThird Party Advisory
- https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 15.0.0.1163 (исключая)Версия до 15.0.0.1163 (исключая)Версия до 15.0.0.1163 (исключая)Версия до 15.0.0.1163 (исключая)
Одновременно
Одно из
cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00562
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.
EPSS
Процентиль: 68%
0.00562
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426