ZDI-CAN-5460: Trend Micro Maximum Security tmnciesc Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers disclose sensitive information on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of IOCTL 0x222814 by the tmnciesc.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges to kernel.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Maximum Security 2022 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-5460?
The severity of ZDI-CAN-5460 is high, as it allows local attackers to disclose sensitive information.
How do I fix ZDI-CAN-5460?
To fix ZDI-CAN-5460, ensure that you are using the latest version of Trend Micro Maximum Security and apply any available patches.
Who is affected by ZDI-CAN-5460?
ZDI-CAN-5460 affects users of Trend Micro Maximum Security, particularly the 2022 version.
Can ZDI-CAN-5460 be exploited remotely?
No, ZDI-CAN-5460 requires that an attacker has local access to the system to exploit this vulnerability.
What should I do if I suspect my system is vulnerable to ZDI-CAN-5460?
If you suspect your system is vulnerable to ZDI-CAN-5460, you should immediately update your software and monitor for any unauthorized access.
- agent/references
- agent/softwarecombine
- agent/title
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-18-268
- alias/ZDI-CAN-5460
- alias/CVE-2018-6234
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/trend micro
- canonical/trend micro maximum security 2022