CVE-2018-15367

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Score

CVSS 3.0 7.8 High

Status

Modified - security@trendmicro.com

Published

2018-10-23

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Trend Micro Antivirus For Mac Consumer (Trend Micro)
• Antivirus For Mac 2017 (Trendmicro)
• Antivirus For Mac 2018 (Trendmicro)
• Antivirus For Mac 2019 (Trendmicro)

References

• http://www.securityfocus.com/bid/105757
• https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx
• https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx
• https://www.zerodayinitiative.com/advisories/ZDI-18-1294/