CVE-2018-6232

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6233

CVE-2018-6233 describes a local privilege-escalation in Trend Micro Maximum Security (Consumer) 2018. The root cause is a buffer overflow in the tmnciesc.sys driver when processing IOCTL 0x222060, which can allow a local attacker who can execute low-privilege code to escalate privileges. Public s...

CVE-2018-6234: Out-of-bounds Read

An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...

CVE-2018-6235: Out-of-bounds Write

An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the...

CVE-2018-6236: Concurrent Execution using Shared Resource with Improper Synchronization

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...

CVE-2018-6232: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-6233: Buffer Copy without Checking Size of Input

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the abilit...

CVE-2018-10493

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10493

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10493

CVE-2018-10493 affects Foxit Reader 9.0.1.1049. The vulnerability is an information disclosure arising from improper validation of user-supplied data in the U3D Final Maximum Resolution attribute, causing a read past the end of an allocated object. Exploitation requires user interaction (maliciou...

CVE-2018-10493: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Trend Micro Maximum Security Detection (Windows SMB Login)

Detection of installed version of Trend Micro Maximum Security on Windows. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Maximum Security Multiple Vulnerabilities (May 2018) - Windows

Trend Micro Maximum Security is prone to multiple vulnerabilities. This VT has been deprecated and split into multiple VTs based on vendor advisories: - Trend Micro Maximum Security 12.0 Build 1226 Multiple Vulnerabilities tmka-20066 OID: 1.3.6.1.4.1.25623.1.0.118643 - Trend Micro Maximum Securit...

PT-2018-17432

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description A Time-of-Check Time-of-Use privilege escalation issue exists due to a flaw in the processing of IOCTL 0x222813 by the tmusa driver. This could allow a local attacker to escalate...

PT-2018-9914

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.0.1.1049 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

Trend Micro Maximum Security tmusa Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Unbreakable Enterprise kernel security update

4.1.12-124.14.2 - scsi: iscsitcp: set BDICAPSTABLEWRITES when data digest enabled Jianchao Wang Orabug: 27726302 - block: fix biowillgap for first bvec with offset Ming Lei Orabug: 27775588 - block: relax check on sg gap Ming Lei Orabug: 27775588 - block: don't optimize for non-cloned bio in...

Microsoft Windows: Maximum password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdmaxage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Maximum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Trend Micro Maximum Security tmnciesc buffer overflow elevation of privilege vulnerability (CNVD-2018-09710)

Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that stems from a lack of proper user data validation in the tmnciesc.sys driver processing IOCTL 0x222060, which could allow an attacker...

Trend Micro Maximum Security tmnciesc Buffer Overflow Elevation of Privilege Vulnerability

Trend Micro Maximum Security is multi-device virus, malware protection software. An elevation of privilege vulnerability exists in Trend Micro Maximum Security that could allow an attacker to execute low-privilege code on the target system...