PT-2009-3316 · Trend Micro · Trend Micro Security+1

B1@Ckeye + 1 · Published 2009-04-01 · Updated 2018-10-10 · CVE-2009-0686

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Pro versions 2008 and 2009 Trend Micro Security Pro versions 2008 and 2009

Description The issue allows local users to gain privileges through a crafted IRP in a METHOD NEITHER IOCTL request to the Devicetmactmon device, which overwrites memory.

Recommendations For Trend Micro Internet Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue. For Trend Micro Security Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-0686

Affected Products

Trend Micro Internet Pro

Trend Micro Security

References · 9

• 🔥 http://securityfocus.com/bid/34304 · Exploit
• 🔥 https://exploit-db.com/exploits/8322 · Exploit
• 🔥 http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0686 · Security Note
• http://securityfocus.com/archive/1/502314/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49513 · Note
• http://en.securitylab.ru/lab/PT-2009-09 · Note
• http://securitytracker.com/id?1021955 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0686 · Note