CVE-2019-9492

A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system.

Score

CVSS 3.0 7.8 High

Status

Modified - security@trendmicro.com

Published

2019-07-26

Last modified

2024-08-04

Weaknesses

CWE-426

Affected products

• Trend Micro Officescan (Trend Micro)
• Officescan (Trendmicro)

References

• https://success.trendmicro.com/solution/1123045
• https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-c…