pc-cillin_internet_security,trend_micro_antivirus,vsapini.sys,trend_micro_antispyware,trend_micro_antirootkit_common_module,tmcomm.sys,client-server-messaging_security,damage_cleanup_services 拒绝服务代码执行漏洞

CVE编号

CVE-2007-0856

利用情况

暂无

补丁情况

N/A

披露时间

2007-02-09

漏洞描述

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469
http://osvdb.org/33039
http://secunia.com/advisories/24069
http://securitytracker.com/id?1017604
http://securitytracker.com/id?1017605
http://securitytracker.com/id?1017606
http://www.kb.cert.org/vuls/id/282240
http://www.kb.cert.org/vuls/id/666800
http://www.securityfocus.com/bid/22448
http://www.vupen.com/english/advisories/2007/0521
https://exchange.xforce.ibmcloud.com/vulnerabilities/32353

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	trend_micro	client-server-messaging_security	3.5	-
	运行在以下环境
	应用	trend_micro	damage_cleanup_services	3.2	-
	运行在以下环境
	应用	trend_micro	pc-cillin_internet_security	2007	-
	运行在以下环境
	应用	trend_micro	tmcomm.sys	1.5.1052	-
	运行在以下环境
	应用	trend_micro	trend_micro_antirootkit_common_module	*	-
	运行在以下环境
	应用	trend_micro	trend_micro_antispyware	3.0_sp2	-
	运行在以下环境
	应用	trend_micro	trend_micro_antispyware	3.2_sp1	-
	运行在以下环境
	应用	trend_micro	trend_micro_antispyware	3.5	-
	运行在以下环境
	应用	trend_micro	trend_micro_antivirus	2007	-
	运行在以下环境
	应用	trend_micro	vsapini.sys	3.320.1003	-

CVSS3评分 7.2

• 攻击路径 本地
• 攻击复杂度 低
• 权限要求 无
• 影响范围 N/A
• 用户交互 无
• 可用性 完全地
• 保密性 完全地
• 完整性 完全地

AV:L/AC:L/Au:N/C:C/I:C/A:C CWE-ID 漏洞类型 NVD-CWE-Other