Описание
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.0.1191 (включая)Версия до 12.0.1191 (включая)Версия до 12.0.1191 (включая)Версия до 12.0.1191 (включая)
Одновременно
Одно из
cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan_monthly:11.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan_monthly:12.0:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03674
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
EPSS
Процентиль: 88%
0.03674
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-94