The vulnerability of the Platinum Host Service antivirus software, Trend Micro Internet Security, allows a hacker to execute arbitrary code within the SYSTEM context.

The vulnerability of the Platinum Host Service antivirus software, Trend Micro Internet Security, is related to improper termination or release of resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the SYSTEM process...

Trend Micro Internet Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2010-5179

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

CVE-2017-5565: Uncontrolled Search Path Element

Code injection vulnerability in Trend Micro Maximum Security 11.0 and earlier, Internet Security 11.0 and earlier, and Antivirus+ Security 11.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a...

PT-2017-16577

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security versions 11.0 and earlier Trend Micro Internet Security versions 11.0 and earlier Trend Micro Antivirus+ Security versions 11.0 and earlier Description A code injection issue allows a local attacker to bypass a...

CVE-2016-1226

CVE-2016-1226 affects Trend Micro Internet Security 8 and 10 and is described as a Cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script or HTML via unspecified vectors. Connected sources (e.g., JVN and OpenVAS entries) confirm an Arbitrary Script Execution...

PT-2016-2275

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Security versions 8 through 10 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is due to a lack of protection measures...

PT-2016-4651

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Security versions 8 through 10 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions 8 through 10, update to a version that contains a fix for this issue. At the moment, there ...

CVE-2016-1226: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1225: Exposure of Sensitive Information to an Unauthorized Actor

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

Trend Micro Internet Security Access Restriction Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security vulnerability exists in versions 8 and 10 of Trend Micro Internet Security. The vulnerability can be exploited...

CVE-2014-9641: Undefined Security Weakness

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call...

PT-2015-4319

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus Plus versions prior to 2.0.0.1015 Trend Micro Internet Security versions prior to 2.0.0.1015 Trend Micro Maximum Security versions prior to 2.0.0.1015 Description The issue allows local users to gain privileges by writing...

Trend Micro Internet Security 2010 ActiveX Remote Exploit (UfPBCtrl.DLL)

No description provided by source. !-- Title: Trend Micro Internet Security Pro 2010 ActiveX Unicode Remote Exploit Version: UfPBCtrl.DLL ver 17.50.0.1366 XPSP3 English Version: UfPBCtrl.dll ver 17.50.0.1647 XPSP3 English -- Hotfix release Coded By: DrIDE Credits: Abyssec Tested: XPSP3 English +...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

No description provided by source. $Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Race condition

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

CVE-2010-5179: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

CVE-2011-1327

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

Code injection

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

CVE-2011-1327

The vulnerability CVE-2011-1327 affects Trend Micro Internet Security 2009 (Virus Buster 2009 / PC-cillin 2009). The key input encryption function does not completely encrypt passwords, allowing local users with access to the system to potentially obtain sensitive information via a keylogger. The...