Description
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Trend Micro Trend Micro Apex One
2019 (On premise), SaaSaffected
Trend Micro Trend Micro OfficeScan
XG SP1affected
Trend Micro Trend Micro Deep Security
12.x, 11.x. 10.xaffected
Trend Micro Trend Micro Worry-Free Business Security
10.0 SP1, Services (SaaS)affected
Trend Micro Trend Micro Security (Consumer Family)
2020 (v16), 2019 (v15)affected
Trend Micro Trend Micro Safe Lock
2.0 SP1, TXOne Edaffected
Trend Micro Trend Micro ServerProtect
SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8affected
Trend Micro Trend Micro Portable Security
3.x, 2.xaffected
Trend Micro Trend Micro HouseCall
8.0affected
Trend Micro Trend Micro Anti-Threat Toolkit (ATTK)
1.62.1240 and belowaffected
Trend Micro Trend Micro Rootkit Buster
2.2affected