Lucene search

K
nvd[email protected]NVD:CVE-2009-0686
HistoryApr 01, 2009 - 10:30 a.m.

CVE-2009-0686

2009-04-0110:30:00
CWE-399
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

0

Percentile

0.4%

The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.

Affected configurations

Nvd
Node
trendmicrointernet_securityMatch2008
OR
trendmicrointernet_securityMatch2008-pro
OR
trendmicrointernet_securityMatch2009
OR
trendmicrointernet_securityMatch2009-pro
VendorProductVersionCPE
trendmicrointernet_security2008cpe:2.3:a:trendmicro:internet_security:2008:*:*:*:*:*:*:*
trendmicrointernet_security2008cpe:2.3:a:trendmicro:internet_security:2008:-:pro:*:*:*:*:*
trendmicrointernet_security2009cpe:2.3:a:trendmicro:internet_security:2009:*:*:*:*:*:*:*
trendmicrointernet_security2009cpe:2.3:a:trendmicro:internet_security:2009:-:pro:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

0

Percentile

0.4%