JVN#28865183: Insecure DLL Loading issue in multiple Trend Micro products

Multiple products provided by Trend Micro Incorporated contain an insecure DLL loading issue (CWE-427).
When invoking the installers of other applications while the concerned products are installed to the PC, the DLL placed in the same directory as the the installers (of the other applications) may be insecurely loaded.

Impact

Arbitrary code may be executed with the privilege of the user invoking the installer of other applications.

Solution

Apply the Patch
Apply the patch according to the information provided by the developer.

Products Affected

• Office Scan Version 11.0
• Office Scan Version XG (Version 12)
• Worry-Free business Security Services
• Worry-Free business Security Version 9.5 (Standard/Advanced)
• Trend Micro Endpoint Sensor 1.6
• Trend Micro Deep Security 10.0
• Trend Micro Deep Security 10.1 (Feature Release)
• Trend Micro Security (Consumer) All 2018 (v12) Versions