Multiple Trend Micro Products CVE-2018-6218 DLL Loading Remote Code Execution Vulnerability

Bugtraq ID:	103096
Class:	Design Error
CVE:	CVE-2018-6218
Remote:	Yes
Local:	Yes
Published:	Feb 14 2018 12:00AM
Updated:	Feb 14 2018 12:00AM
Credit:	Hidenori Ohta of Mitsubishi Electric Information Systems Corporation.
Vulnerable:	Trend Micro Worry-Free Business Security 9.5 Trend Micro Premium Security 12.0 Trend Micro OfficeScan Business Security 9.5 Trend Micro OfficeScan XG 11 Trend Micro OfficeScan XG (12.0) Trend Micro OfficeScan 11.0 Trend Micro Maximum Security 12.0 Trend Micro Internet Security 12.0 Trend Micro Endpoint Sensor 1.6 Trend Micro Deep Security 10.1 Trend Micro Deep Security 10.0 Trend Micro Antivirus+ Security 12.0
Not Vulnerable:	Trend Micro Worry-Free Business Security 9.5 Patch 1 (B1445) Trend Micro OfficeScan Business Security 9.5 Patch 1 (Build 1 Trend Micro Endpoint Sensor 1.6 Update 3 (CP 310 Trend Micro Deep Security 10.2 Trend Micro Deep Security 10.0_U5_CP

Multiple Trend Micro Products CVE-2018-6218 DLL Loading Remote Code Execution Vulnerability

Multiple Trend Micro Products are prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition.

Multiple Trend Micro Products CVE-2018-6218 DLL Loading Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.