VulnerabilityModified
CVE-2014-9641
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
HIGH 7.2EPSS 0.96%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.96% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- trendmicro/tmeext.sys
- Source
- cve@mitre.org
References
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspxVendor Advisory
- http://www.exploit-db.com/exploits/35962Exploit
- http://www.greyhathacker.net/?p=818Exploit
- http://www.osvdb.org/115514
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspxVendor Advisory
- http://www.exploit-db.com/exploits/35962Exploit
- http://www.greyhathacker.net/?p=818Exploit
- http://www.osvdb.org/115514
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.