CVE-2007-4277

The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality. NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.

🔗 References (14)

• cve@mitrehttp://esupport.trendmicro.com/support/viewxml.do?ContentID=1035793
• cve@mitrehttp://esupport.trendmicro.com/support/viewxml.do?ContentID=1036190
• cve@mitrehttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=609
• cve@mitrehttp://secunia.com/advisories/27378
• cve@mitrehttp://securitytracker.com/id?1018863
• cve@mitrehttp://www.securityfocus.com/bid/26209
• cve@mitrehttp://www.vupen.com/english/advisories/2007/3627
• af854a3a-2127-422b-91ae-364da2661108http://esupport.trendmicro.com/support/viewxml.do?ContentID=1035793
• af854a3a-2127-422b-91ae-364da2661108http://esupport.trendmicro.com/support/viewxml.do?ContentID=1036190
• af854a3a-2127-422b-91ae-364da2661108http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=609
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/27378
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1018863
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26209
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/3627