CVE-2018-10358: Improper Restriction of Operations within the Bounds of a Memory Buffer

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x2200B4 in the TMWFP driver. An attacker must first obtain the ability to...

Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2018-9844

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan versions 11.0 SP1 and XG Description: A pool corruption privilege escalation issue exists due to a flaw in the processing of IOCTL 0x2200B4 in the TMWFP driver. This could allow a local attacker to escalate privileges o...