CVE-2020-8607: Input Validation
First published: Wed Aug 05 2020(Updated: )
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Antivirus Toolkit | <1.62.1240 | |
| Trendmicro Apex One | =2019 | |
| Trendmicro Apex One | =saas | |
| Trendmicro Deep Security | =9.6 | |
| Trendmicro Deep Security | =10.0 | |
| Trendmicro Deep Security | =11.0 | |
| Trendmicro Deep Security | =12.0 | |
| Trendmicro Officescan | =xg-sp1 | |
| Trendmicro Officescan Business Security | =9.0 | |
| Trendmicro Officescan Business Security | =9.5 | |
| Trendmicro Officescan Business Security | =10.0-sp1 | |
| Trendmicro Officescan Business Security Service | ||
| Trendmicro Officescan Cloud | =15 | |
| Trendmicro Officescan Cloud | =16.0 | |
| Trendmicro Online Scan | =8.0 | |
| Trendmicro Portable Security | =2.0 | |
| Trendmicro Portable Security | =3.0 | |
| Trendmicro Rootkit Buster | =2.2 | |
| Trendmicro Safe Lock | ||
| Trendmicro Safe Lock | =2.0-sp1 | |
| Trendmicro Serverprotect | =5.8 | |
| Trendmicro Serverprotect | =5.8 | |
| Trendmicro Serverprotect | =5.8 | |
| Trendmicro Serverprotect | =6.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8607?
CVE-2020-8607 is an input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver.
How severe is CVE-2020-8607?
CVE-2020-8607 has a severity rating of 6.7 (high).
Which products are affected by CVE-2020-8607?
Multiple Trend Micro products are affected by CVE-2020-8607, including Trendmicro Antivirus Toolkit, Trend Micro Apex One and Worry-Free Business Security, Trendmicro Deep Security, Trendmicro Officescan, Trendmicro Officescan Business Security, Trendmicro Officescan Business Security Service, Trendmicro Officescan Cloud, Trendmicro Online Scan, Trendmicro Portable Security, Trendmicro Rootkit Buster, Trendmicro Safe Lock, and Trendmicro Serverprotect.
What is the risk of CVE-2020-8607?
The risk of CVE-2020-8607 is that an attacker in user-mode with administrator permissions could abuse a driver to modify a kernel address, potentially causing a system crash.
Is there a fix for CVE-2020-8607?
Trend Micro has released patches to address the vulnerability in the affected products. Please refer to the references for more information.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/author
- agent/remedy
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/trendmicro
- canonical/trendmicro antivirus toolkit
- canonical/trendmicro apex one
- version/trendmicro apex one/2019
- version/trendmicro apex one/saas
- canonical/trendmicro deep security
- version/trendmicro deep security/9.6
- version/trendmicro deep security/10.0
- version/trendmicro deep security/11.0
- version/trendmicro deep security/12.0
- canonical/trendmicro officescan
- version/trendmicro officescan/xg-sp1
- canonical/trendmicro officescan business security
- version/trendmicro officescan business security/9.0
- version/trendmicro officescan business security/9.5
- version/trendmicro officescan business security/10.0-sp1
- canonical/trendmicro officescan business security service
- canonical/trendmicro officescan cloud
- version/trendmicro officescan cloud/15
- version/trendmicro officescan cloud/16.0
- canonical/trendmicro online scan
- version/trendmicro online scan/8.0
- canonical/trendmicro portable security
- version/trendmicro portable security/2.0
- version/trendmicro portable security/3.0
- canonical/trendmicro rootkit buster
- version/trendmicro rootkit buster/2.2
- canonical/trendmicro safe lock
- version/trendmicro safe lock/2.0-sp1
- canonical/trendmicro serverprotect
- version/trendmicro serverprotect/5.8
- version/trendmicro serverprotect/6.0
- vendor/microsoft
- canonical/microsoft windows