CVE-2014-9641

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2015-02-06

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Tmeext.sys (Trendmicro)

References

• http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
• http://www.exploit-db.com/exploits/35962
• http://www.greyhathacker.net/?p=818
• http://www.osvdb.org/115514