CVE-2007-0856 - TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.32

CVE-2007-0856

Summary

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.

References

Vulnerable Configurations

cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:smb:*:*:*:*:*
cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:smb:*:*:*:*:*
cpe:2.3:a:trend_micro:damage_cleanup_services:3.2:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:damage_cleanup_services:3.2:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:pc-cillin_internet_security:2007:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:pc-cillin_internet_security:2007:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:tmcomm.sys:1.5.1052:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:tmcomm.sys:1.5.1052:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.0_sp2:*:enterprise:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.0_sp2:*:enterprise:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.2_sp1:*:smb:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.2_sp1:*:smb:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.5:*:consumer:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antispyware:3.5:*:consumer:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antivirus:2007:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:trend_micro_antivirus:2007:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:vsapini.sys:3.320.1003:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:vsapini.sys:3.320.1003:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 29-07-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	22448
cert-vn	VU#282240 VU#666800
confirm	http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432
idefense	20070207 Trend Micro TmComm Local Privilege Escalation Vulnerability
osvdb	33039
sectrack	1017604 1017605 1017606
secunia	24069
vupen	ADV-2007-0521
xf	trendmicro-tmcomm-privilege-escalation(32353)

Last major update

29-07-2017 - 01:30

Published

08-02-2007 - 18:28

Last modified

29-07-2017 - 01:30