CVE-2018-10359: Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability
First published: Fri Jun 08 2018(Updated: )
A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220078 in the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Officescan | =11.0-sp1 | |
| Trendmicro Officescan | =xg | |
| Trendmicro Officescan | =xg-sp1 | |
| Trend Micro OfficeScan |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-10359?
CVE-2018-10359 is a vulnerability in Trend Micro OfficeScan that allows local attackers to escalate privileges.
How can the CVE-2018-10359 vulnerability be exploited?
To exploit CVE-2018-10359, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the affected software?
The affected software includes Trend Micro OfficeScan versions 11.0 SP1, XG, and XG SP1.
What is the severity of CVE-2018-10359?
CVE-2018-10359 has a severity rating of 6.3 (medium).
How can I fix the CVE-2018-10359 vulnerability?
To fix the CVE-2018-10359 vulnerability, users should follow the recommendations provided by Trend Micro in their solution document.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/remedy
- agent/event
- agent/tags
- agent/first-publish-date
- agent/description
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-18-564
- alias/ZDI-CAN-5638
- alias/CVE-2018-10359
- agent/software-canonical-lookup
- vendor/trendmicro
- canonical/trendmicro officescan
- version/trendmicro officescan/11.0-sp1
- version/trendmicro officescan/xg
- version/trendmicro officescan/xg-sp1
- vendor/trend micro
- canonical/trend micro officescan