CVE-2007-0856

CVE	CVE-2007-0856
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2007-02-08 18:28:00 UTC
Updated	2017-07-29 01:30:00 UTC
Description	TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.

Problem Types: NVD-CWE-Other

Type	Vendor	Product	Version	Update	Edition	Language
Application	Trend Micro	Client-server-messaging Security	3.5	All	smb	All
Application	Trend Micro	Client-server-messaging Security	3.5	All	smb	All
Application	Trend Micro	Damage Cleanup Services	3.2	All	All	All
Application	Trend Micro	Damage Cleanup Services	3.2	All	All	All
Application	Trend Micro	Pc-cillin Internet Security	2007	All	All	All
Application	Trend Micro	Pc-cillin Internet Security	2007	All	All	All
Application	Trend Micro	Tmcomm.sys	1.5.1052	All	All	All
Application	Trend Micro	Tmcomm.sys	1.5.1052	All	All	All
Application	Trend Micro	Trend Micro Antirootkit Common Module	All	All	All	All
Application	Trend Micro	Trend Micro Antirootkit Common Module	All	All	All	All
Application	Trend Micro	Trend Micro Antispyware	3.0_sp2	All	enterprise	All
Application	Trend Micro	Trend Micro Antispyware	3.2_sp1	All	smb	All
Application	Trend Micro	Trend Micro Antispyware	3.5	All	consumer	All
Application	Trend Micro	Trend Micro Antispyware	3.0_sp2	All	enterprise	All
Application	Trend Micro	Trend Micro Antispyware	3.2_sp1	All	smb	All
Application	Trend Micro	Trend Micro Antispyware	3.5	All	consumer	All
Application	Trend Micro	Trend Micro Antivirus	2007	All	All	All
Application	Trend Micro	Trend Micro Antivirus	2007	All	All	All
Application	Trend Micro	Vsapini.sys	3.320.1003	All	All	All
Application	Trend Micro	Vsapini.sys	3.320.1003	All	All	All

Reference	Source	Link	Tags
US-CERT Vulnerability Notes	CERT-VN	www.kb.cert.org	US Government Resource
Trend Micro Products IOCTL Handler Privilege Escalation - Advisories - Secunia	SECUNIA	secunia.com	Patch, Vendor Advisory
20070207 Trend Micro TmComm Local Privilege Escalation Vulnerability	IDEFENSE	labs.idefense.com	Vendor Advisory
PC-cillin Unsafe 'TmComm.sys' Driver Permissions Let Local Users Gain Elevated Privileges - SecurityTracker	SECTRACK	securitytracker.com
33039	OSVDB	osvdb.org
US-CERT Vulnerability Note VU#282240	CERT-VN	www.kb.cert.org	US Government Resource
IBM X-Force Exchange	XF	exchange.xforce.ibmcloud.com
Trend Micro AntiVirus Scan Engine TMComm Local Privilege Escalation Vulnerability	BID	www.securityfocus.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	VUPEN	www.vupen.com
Trend Micro Antivirus Unsafe 'TmComm.sys' Driver Permissions Let Local Users Gain Elevated Privileges - SecurityTracker	SECTRACK	securitytracker.com
[Vulnerability Confirmation] TmComm Local Privilege Escalation Vulnerability [EN-1034432]	CONFIRM	esupport.trendmicro.com	Patch
Trend Micro Anti-Spyware Unsafe 'TmComm.sys' Driver Permissions Let Local Users Gain Elevated Privileges - SecurityTracker	SECTRACK	securitytracker.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.