| Package | Affected versions | Patched versions |
|---|---|---|
| antivirus toolkit | < 1.62.1240 | 1.62.1240 |
| apex one | = 2019= saas | |
| deep security | = 10.0= 11.0= 12.0= 9.6 | |
| officescan | = xg | |
| officescan business security | = 10.0= 9.0= 9.5 | |
| officescan cloud | = 15= 16.0 | |
| online scan | = 8.0 | |
| portable security | = 2.0= 3.0 | |
| rootkit buster | = 2.2 | |
| safe lock | = 2.0 | |
| serverprotect | = 5.8= 6.0 |
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free