PT-2009-3316 · Trend Micro · Trend Micro Security+1

B1@Ckeye + 1 · Publicado 2009-04-01 · Atualizado 2018-10-10 · CVE-2009-0686

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Pro versions 2008 and 2009 Trend Micro Security Pro versions 2008 and 2009

Description The issue allows local users to gain privileges through a crafted IRP in a METHOD NEITHER IOCTL request to the Devicetmactmon device, which overwrites memory.

Recommendations For Trend Micro Internet Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue. For Trend Micro Security Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0686

Produtos afetados

Trend Micro Internet Pro

Trend Micro Security

Referências · 9

• 🔥 http://securityfocus.com/bid/34304 · Exploit
• 🔥 https://exploit-db.com/exploits/8322 · Exploit
• 🔥 http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip · Exploit
• http://securityfocus.com/archive/1/502314/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49513 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0686 · Nota de Segurança
• http://en.securitylab.ru/lab/PT-2009-09 · Nota
• http://securitytracker.com/id?1021955 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0686 · Nota