CVE-2018-6233

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6234

An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...

CVE-2018-6236

CVE-2018-6236 affects Trend Micro Maximum Security (Consumer) 2018. The vulnerability is a local privilege-escalation flaw in the tmusa driver, triggered by processing IOCTL 0x222813, due to a TOCTOU race condition in user-supplied data. An attacker who can execute low-privilege code can escalate...

CVE-2018-6236

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...

CVE-2018-6232

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6232

Trend Micro Maximum Security uses a vulnerable tmnciesc.sys driver where the root cause is a buffer overflow in processing IOCTL 0x22205C. This local-privilege-escalation flaw allows an attacker who can run low-privilege code to write past the end of an allocated buffer, enabling privilege escala...

CVE-2018-6234: Out-of-bounds Read

An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...

CVE-2018-6235: Out-of-bounds Write

An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the...

CVE-2018-6236: Concurrent Execution using Shared Resource with Improper Synchronization

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...

CVE-2018-6232: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6233: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the abilit...

Trend Micro Maximum Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Maximum Security is prone to multiple vulnerabilities. This VT has been deprecated and split into multiple VTs based on vendor advisories: - Trend Micro Maximum Security 12.0 Build 1226 Multiple Vulnerabilities tmka-20066 OID: 1.3.6.1.4.1.25623.1.0.118643 - Trend Micro Maximum Securit...

Trend Micro Maximum Security Detection (Windows SMB Login)

Detection of installed version of Trend Micro Maximum Security on Windows. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Maximum Security tmusa Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2018-17432

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description A Time-of-Check Time-of-Use privilege escalation issue exists due to a flaw in the processing of IOCTL 0x222813 by the tmusa driver. This could allow a local attacker to escalate...

Trend Micro Maximum Security tmnciesc buffer overflow elevation of privilege vulnerability (CNVD-2018-09710)

Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that stems from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222060, which could allow an attacker...

Trend Micro Maximum Security tmnciesc Buffer Overflow Elevation of Privilege Vulnerability

Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that could allow an attacker to execute low-privilege code on the target system...

Trend Micro Maximum Security tmnciesc Out-of-Bounds Read Information Disclosure Vulnerability

Trend Micro Maximum Security is multi-device virus, malware protection software. Trend Micro Maximum Security suffers from an information disclosure vulnerability that originates from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222814, which could allow an...

Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Maximum Security tmnciesc Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers disclose sensitive information on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...