CVE-2007-0856: High severity Trend Micro Client-server-messaging Security vulnerability
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0856?
CVE-2007-0856 is classified as a critical vulnerability that could allow remote code execution.
How do I fix CVE-2007-0856?
To fix CVE-2007-0856, you should update to the latest version of affected Trend Micro products that address this vulnerability.
Which software products are affected by CVE-2007-0856?
CVE-2007-0856 affects Trend Micro AntiSpyware, PC-Cillin Internet Security 2007, and several other Trend Micro security products.
What impact could CVE-2007-0856 have on my system?
CVE-2007-0856 could potentially allow an attacker to execute arbitrary code, compromising the affected system.
Is there a known exploit for CVE-2007-0856?
Yes, there are known exploits that can leverage CVE-2007-0856 to execute malicious code on vulnerable systems.