A vulnerability has been identified in various Trend Micro products, which could be exploited by local attackers to obtain elevated privileges. This issue is due to insecure permissions being set on the Anti-Rootkit Common Module (RCM) and the \\.\TmComm DOS device interface, which could be exploited by malicious users to overwrite arbitrary memory addresses or execute execute abitrary code with kernel level privileges.
Credits
Vulnerability reported by Rubén Santamarta
ChangeLog
2007-02-08 : Initial release
Vulnerability Management
Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.
French
