Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability

Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability allows local attackers to disclose sensitive information on affected installations. Attackers must execute low-privileged code on the target system and exploit a specific flaw within the User Mode Hooking Monitor Engine, resulting from the lack of proper validation of user-supplied data, leading to a read past the end of an allocated buffer. This can be leveraged to escalate privileges and execute arbitrary code in the context of SYSTEM