CVE-2017-14088

Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain th...

CVE-2017-14088

Trend Micro OfficeScan (11.0 and XG) is affected by a local memory-corruption vulnerability in tmwfp.sys that allows a low-privilege attacker to gain kernel-level code execution. Exploitation relies on handling of IOCTLs in tmwfp.sys, enabling privilege escalation without user interaction. Severa...