CVE-2017-14088: Buffer Overflow
First published: Thu Oct 05 2017(Updated: )
Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro OfficeScan Corporate Edition | =11.0-sp1 | |
| Trend Micro OfficeScan | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-14088?
CVE-2017-14088 has been classified as a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2017-14088?
To fix CVE-2017-14088, apply the latest security patches provided by Trend Micro for OfficeScan 11.0 and XG.
What systems are affected by CVE-2017-14088?
CVE-2017-14088 affects Trend Micro OfficeScan version 11.0 SP1 and OfficeScan XG version 12.0.
What type of attack does CVE-2017-14088 enable?
CVE-2017-14088 enables local attackers to execute arbitrary code and escalate privileges.
What component is exploited in CVE-2017-14088?
CVE-2017-14088 is exploited via the tmwfp.sys component in vulnerable Trend Micro installations.
- agent/type
- agent/references
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trendmicro
- canonical/trend micro officescan corporate edition
- version/trend micro officescan corporate edition/11.0-sp1
- canonical/trend micro officescan
- version/trend micro officescan/12.0