PT-2018-16092 · Trend Micro · Trend Micro Maximum Security

Published 2018-07-06 · Updated 2018-08-28 · CVE-2018-3608

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security (Consumer) 2018 versions 12.0.1191 and below

Description A vulnerability in the User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system, enabling the injection of malicious code into other processes.

Recommendations For versions 12.0.1191 and below, update to a version above 12.0.1191 to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2018-3608

Affected Products

Trend Micro Maximum Security

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-3608 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3608 · Vendor Advisory
• http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx · Vendor Advisory
• https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx · Vendor Advisory