Vulnerability Details CVE-2014-9641
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.2%
CVSS Severity
CVSS v2 Score 7.2
References
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
- http://www.exploit-db.com/exploits/35962
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/115514
- http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
- http://www.exploit-db.com/exploits/35962
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/115514
Products affected by CVE-2014-9641
-
cpe:2.3:a:trendmicro:tmeext.sys:2.0.0.1014