A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/105757 | Third Party Advisory VDB Entry |
| https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx | Vendor Advisory |
| https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-18-1293/ | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/105757 | Third Party Advisory VDB Entry |
| https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx | Vendor Advisory |
| https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-18-1293/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/105757 - Third Party Advisory, VDB Entry | |
| References | () https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx - Vendor Advisory | |
| References | () https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx - Vendor Advisory | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-18-1293/ - Third Party Advisory, VDB Entry |
Information
Published : 2018-10-23 14:29
Updated : 2024-11-21 03:50
NVD link : CVE-2018-15366
Mitre link : CVE-2018-15366
CVE.ORG link : CVE-2018-15366
JSON object : View
Products Affected
trendmicro
- antivirus_for_mac_2018
- antivirus_for_mac_2019
- antivirus_for_mac_2017
CWE
CWE-416
Use After Free