CVE-2017-14088: Buffer Overflow
Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14088?
CVE-2017-14088 has been classified as a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2017-14088?
To fix CVE-2017-14088, apply the latest security patches provided by Trend Micro for OfficeScan 11.0 and XG.
What systems are affected by CVE-2017-14088?
CVE-2017-14088 affects Trend Micro OfficeScan version 11.0 SP1 and OfficeScan XG version 12.0.
What type of attack does CVE-2017-14088 enable?
CVE-2017-14088 enables local attackers to execute arbitrary code and escalate privileges.
What component is exploited in CVE-2017-14088?
CVE-2017-14088 is exploited via the tmwfp.sys component in vulnerable Trend Micro installations.