Trend Micro Anti-Rootkit Common Module fails to properly restrict access to the "\\.\TmComm" DOS device interface

Overview A vulnerability exists in Trend Micro's Anti-Rootkit Common Module that may allow a local attacker to gain elevated privileges. Description Trend Micro AntiVirus is a virus scanner for Microsoft Windows and Linux. The Trend Micro Anti-Rootkit Common Module is included with Trend Micro...

CVE-2007-0856

CVE-2007-0856 concerns Trend Micro’s Anti-Rootkit Common Module (TmComm.sys) where the DOS device interface "\.\TmComm" insecurely permits writes to the Everyone group. This can grant local users access to privileged IOCTLs and may allow execution of code or overwriting memory in kernel context, ...