ZDI-18-1294: Trend Micro Anti-Virus ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Anti-Virus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the function ctlset KERedirect kext. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the kernel.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-18-1294?
The severity of ZDI-18-1294 is considered high due to its potential to allow privilege escalation.
How do I fix ZDI-18-1294?
To fix ZDI-18-1294, update your Trend Micro Anti-Virus software to the latest version provided by the vendor.
Who is affected by ZDI-18-1294?
ZDI-18-1294 affects users of vulnerable installations of Trend Micro Anti-Virus.
Can ZDI-18-1294 be exploited remotely?
No, ZDI-18-1294 requires an attacker to execute low-privileged code on the target system before exploitation.
What is the nature of the flaw in ZDI-18-1294?
The flaw in ZDI-18-1294 allows local attackers to escalate privileges on the affected system.