PT-2018-16092 · Trend Micro · Trend Micro Maximum Security

Publicado 2018-07-06 · Atualizado 2018-08-28 · CVE-2018-3608

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security (Consumer) 2018 versions 12.0.1191 and below

Description A vulnerability in the User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system, enabling the injection of malicious code into other processes.

Recommendations For versions 12.0.1191 and below, update to a version above 12.0.1191 to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2018-3608

Produtos afetados

Trend Micro Maximum Security

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-3608 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-3608 · Aviso do Fabricante
• http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx · Aviso do Fabricante
• https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx · Aviso do Fabricante