CVE ID | CVE-2018-6234 |
CVSS SCORE | 4.6, AV:L/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Trend Micro |
AFFECTED PRODUCTS |
Maximum Security |
VULNERABILITY DETAILS |
The specific flaw exists within processing of IOCTL 0x222814 by the tmnciesc.sys driver. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges to kernel. |
ADDITIONAL DETAILS |
Trend Micro has issued an update to correct this vulnerability. More details can be found at:
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx |
DISCLOSURE TIMELINE |
|
CREDIT | Anonymous |