TrendMicro Anti-Threat Toolkit Improper Fix

Hi @ll, on September 29, 2019, John Page reported a remote code execution with escalation of privilege in TrendMicro's Anti-Threat Toolkit to its vendor. TrendMicro assigned CVE-2019-9491 to this vulnerability and told the reporter, his dog and the world on October 18, 2019, that they had fixed t...

CVE-2019-9491

The connected Red Hat CVE entries confirm CVE-2019-9491 affects Trend Micro Anti-Threat Toolkit (ATTK) up to version 1.62.0.1218, allowing an attacker to place malicious files in the same directory and potentially achieve arbitrary remote code execution when executed. The Red Hat notes also refer...

Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution

Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution Exploit Title: Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution Date: 2019-10-19 Exploit Author: hyp3rlinx Vendor Homepage: www.trendmicro.com Version: 1.62.0.1218 and below Tested on: Microsoft Windows CVE: N/...

CVE-2019-9491

creationtimestamp| type| source ---|---|--- 2019-10-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47527 2024-10-11 21:34:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/441...

Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution Exploit

Exploit Title: Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution Date: 2019-10-19 Exploit Author: hyp3rlinx Vendor Homepage: www.trendmicro.com Version: 1.62.0.1218 and below Tested on: Microsoft Windows CVE: N/A + Credits: John Page aka hyp3rlinx + Website:...

Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution

Exploit Title: Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution Date: 2019-10-19 Exploit Author: hyp3rlinx Vendor Homepage: www.trendmicro.com Version: 1.62.0.1218 and below Tested on: Microsoft Windows CVE: N/A + Credits: John Page aka hyp3rlinx + Website:...

Trend Micro Anti-Threat Toolkit (ATTK) 1.62.0.1218 Remote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-ATTK-REMOTE-CODE-EXECUTION.txt + ISR: Apparition Security Vendor www.trendmicro.com Product Trend Micro Anti-Threat Toolkit ATTK 1.62.0.1218...