CVE-2014-9641
published 2015-02-06CVE-2014-9641: The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory…
PriorityP338high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.96%
57.0th percentile
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| trendmicro | tmeext.sys | <= 2.0.0.1014 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspxhttp://www.exploit-db.com/exploits/35962http://www.greyhathacker.net/?p=818http://www.osvdb.org/115514http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspxhttp://www.exploit-db.com/exploits/35962http://www.greyhathacker.net/?p=818http://www.osvdb.org/115514
2015-02-06
Published