CVE ID | CVE-2018-10513 |
CVSS SCORE | 6.9, AV:L/AC:M/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Trend Micro |
AFFECTED PRODUCTS |
Maximum Security |
VULNERABILITY DETAILS |
The specific flaw exists within processing of ID_AMSP_MASTER requests in the service process coreServiceShell.exe. When parsing the request buffer, the process does not properly validate user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. |
ADDITIONAL DETAILS |
Trend Micro has issued an update to correct this vulnerability. More details can be found at:
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx |
DISCLOSURE TIMELINE |
|
CREDIT | Anonymous |