The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tmeext.sys | Trendmicro | * | 2.0.0.1014 (including) |
References
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
- http://www.exploit-db.com/exploits/35962
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/115514
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
- http://www.exploit-db.com/exploits/35962
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/115514