PT-2019-13782 · Trend Micro · Trend Micro Security+1

Publicado 2019-08-21 · Atualizado 2021-07-21 · CVE-2019-14686

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 15 Trend Micro Ransom Buster version 1.0

Description A DLL hijacking issue exists in the Folder Shield component and the standalone Trend Micro Ransom Buster tool. This issue could allow an attacker to load a malicious DLL, resulting in elevated privileges.

Recommendations For Trend Micro Security version 15, update the Folder Shield component to prevent DLL hijacking. For Trend Micro Ransom Buster version 1.0, consider disabling the vulnerable component until a patch is available.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-14686

Produtos afetados

Trend Micro Ransom Buster

Trend Micro Security

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-14686 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14686 · Nota de Segurança
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123421.aspx · Aviso do Fabricante