JVN#55428526: Deep Discovery Inspector vulnerable to remote code execution

Deep Discovery Inspector provided by Trend Micro Incorporated contains a remote code execution vulnerability.

Impact

An attacker who can access the product as an administrator may execute arbitrary code with the root privilege.

Solution

For Deep Discovery Inspector 3.5 and later:
Apply the patch
Apply the appropriate patch according to the information provided by the developer.

For Deep Discovery Inspector 3.2 and earlier:
Update the software and Apply the patch
Update the software to Deep Discovery Inspector 3.5 or later, and apply the appropriate patch according to the information provided by the developer.

Products Affected

• Deep Discovery Inspector 3.8 SP1 (3.81)
• Deep Discovery Inspector 3.7
• Deep Discovery Inspector 3.5
• Deep Discovery Inspector 3.2
• Deep Discovery Inspector 3.1
• Deep Discovery Inspector 3.0
  Note that the product name and versions above are ones used in Japan. The product name and versions may differ in respective countries or regions.
  For more details, refer to the information provided by the developer.