QwikSec

Security Database

CVE

CWE

Training

CVE-2009-0686

Published: Apr 1, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip

x_refsource_MISC

http://en.securitylab.ru/lab/PT-2009-09

x_refsource_MISC

trend-tmactmon-privilege-escalation(49513)

vdb-entry

x_refsource_XF

20090331 [Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.