CVE-2021-25249

An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:54

Type Values Removed Values Added
References () https://success.trendmicro.com/solution/000284202 - Patch, Vendor Advisory () https://success.trendmicro.com/solution/000284202 - Patch, Vendor Advisory
References () https://success.trendmicro.com/solution/000284205 - Patch, Vendor Advisory () https://success.trendmicro.com/solution/000284205 - Patch, Vendor Advisory
References () https://success.trendmicro.com/solution/000284206 - Patch, Vendor Advisory () https://success.trendmicro.com/solution/000284206 - Patch, Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-21-119/ - Third Party Advisory, VDB Entry () https://www.zerodayinitiative.com/advisories/ZDI-21-119/ - Third Party Advisory, VDB Entry

Information

Published : 2021-02-04 20:15

Updated : 2024-11-21 05:54


NVD link : CVE-2021-25249

Mitre link : CVE-2021-25249

CVE.ORG link : CVE-2021-25249


JSON object : View

Products Affected

trendmicro

  • worry-free_business_security
  • apex_one
  • officescan

microsoft

  • windows
CWE
CWE-787

Out-of-bounds Write