CVE-2018-6235

Trend Micro Maximum Security (Consumer) 2018 is affected by an Out-of-Bounds write privilege escalation in the tmnciesc.sys driver, caused by improper handling of IOCTL 0x222814. An attacker who can run low-privilege code locally can exploit this to escalate privileges on the target system. Affec...

CVE-2018-6236

CVE-2018-6236 affects Trend Micro Maximum Security (Consumer) 2018. The vulnerability is a local privilege-escalation flaw in the tmusa driver, triggered by processing IOCTL 0x222813, due to a TOCTOU race condition in user-supplied data. An attacker who can execute low-privilege code can escalate...

CVE-2018-6236: Concurrent Execution using Shared Resource with Improper Synchronization

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...

CVE-2018-6234: Out-of-bounds Read

An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...

CVE-2018-6232: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6235: Out-of-bounds Write

An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the...

CVE-2018-6233: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-10493

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10493

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10493

CVE-2018-10493 affects Foxit Reader 9.0.1.1049. The vulnerability is an information disclosure arising from improper validation of user-supplied data in the U3D Final Maximum Resolution attribute, causing a read past the end of an allocated object. Exploitation requires user interaction (maliciou...

CVE-2018-10493: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Trend Micro Maximum Security Detection (Windows SMB Login)

Detection of installed version of Trend Micro Maximum Security on Windows. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Maximum Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Maximum Security is prone to multiple vulnerabilities. This VT has been deprecated and split into multiple VTs based on vendor advisories: - Trend Micro Maximum Security 12.0 Build 1226 Multiple Vulnerabilities tmka-20066 OID: 1.3.6.1.4.1.25623.1.0.118643 - Trend Micro Maximum Securit...

Trend Micro Maximum Security tmusa Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2018-17432

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description A Time-of-Check Time-of-Use privilege escalation issue exists due to a flaw in the processing of IOCTL 0x222813 by the tmusa driver. This could allow a local attacker to escalate...

PT-2018-9914

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.0.1.1049 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

Unbreakable Enterprise kernel security update

4.1.12-124.14.2 - scsi: iscsitcp: set BDICAPSTABLEWRITES when data digest enabled Jianchao Wang Orabug: 27726302 - block: fix biowillgap for first bvec with offset Ming Lei Orabug: 27775588 - block: relax check on sg gap Ming Lei Orabug: 27775588 - block: don't optimize for non-cloned bio in...

Microsoft Windows: Maximum password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdmaxage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Maximum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Trend Micro Maximum Security tmnciesc Out-of-Bounds Read Information Disclosure Vulnerability

Trend Micro Maximum Security is multi-device virus, malware protection software. Trend Micro Maximum Security suffers from an information disclosure vulnerability that originates from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222814, which could allow an...

Trend Micro Maximum Security tmnciesc buffer overflow elevation of privilege vulnerability (CNVD-2018-09710)

Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that stems from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222060, which could allow an attacker...