PT-2019-15263 · Trend Micro · Trend Micro Security

Published 2019-12-09 · Updated 2019-12-12 · CVE-2019-18190

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security (Consumer) version 16.x

Description The issue is related to null pointer dereference errors, which can cause the application to crash. This could potentially lead to unsigned code execution under certain circumstances.

Recommendations For version 16.x, update to a newer version that contains a fix for this issue to prevent potential unsigned code execution.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-18190

Affected Products

Trend Micro Security

References · 3

• https://osv.dev/vulnerability/CVE-2019-18190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18190 · Security Note
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx · Vendor Advisory