CVE-2018-3608: Code Injection
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2018-3608?
The vulnerability CVE-2018-3608 is a security flaw in Trend Micro Maximum Security (Consumer) 2018 (versions 12.0.1191 and below) that allows an attacker to inject malicious code into other processes.
Which software versions are affected by CVE-2018-3608?
Versions 12.0.1191 and below of Trend Micro Maximum Security, Trendmicro Internet Security, Trendmicro Premium Security, Trendmicro Officescan, and Trendmicro Officescan Monthly are affected by CVE-2018-3608.
What is the severity of CVE-2018-3608?
CVE-2018-3608 has a severity level of 9.8 (Critical).
How can an attacker exploit CVE-2018-3608?
An attacker can exploit CVE-2018-3608 by creating a specially crafted packet that alters a vulnerable system and injects malicious code into other processes.
Where can I find more information about CVE-2018-3608?
You can find more information about CVE-2018-3608 on the following pages: [Trend Micro Support](http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx) and [Trend Micro Technical Support](https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx).