CVE-2007-4277: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions Everyone:Write for the \.\Tmfilter device, which allows local users to send arbitrary content to the device via the...

Trend Micro病毒扫描引擎Tmxpflt.sys多个本地安全漏洞

BUGTRAQ ID: 26209 CVECAN ID: CVE-2007-4277 Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro病毒扫描引擎的驱动实现上存在多个安全漏洞，本地攻击者可能利用此漏洞提升权限。 Trend Micro的杀毒引擎中所捆绑的Tmxpflt.sys驱动中没有对\.\Tmfilter DOS设备接口设置安全的权限，允许Everyone写访问，因此任何本地登录的用户都可以访问仅有特权用户才可以访问的功能。 此外这个DOS设备接口的IOCTL...

iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability

Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability iDefense Security Advisory 10.25.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 25, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine provides AntiVirus capabilities to desktop, server, and gateway system...