National Cyber-Alert System

Vulnerability Summary for CVE-2007-0856

Overview

TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#666800

Name: VU#666800

Hyperlink:http://www.kb.cert.org/vuls/id/666800

US-CERT Vulnerability Note: VU#282240

Name: VU#282240

Hyperlink:http://www.kb.cert.org/vuls/id/282240

External Source: VUPEN

Name: ADV-2007-0521

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2007/0521

External Source: SECUNIA

Name: 24069

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/24069

External Source: CONFIRM

Name: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432

Type: Patch Information

Hyperlink:http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432

External Source: BID

Name: 22448

Hyperlink:http://www.securityfocus.com/bid/22448

External Source: SECTRACK

Name: 1017606

Hyperlink:http://securitytracker.com/id?1017606

External Source: SECTRACK

Name: 1017605

Hyperlink:http://securitytracker.com/id?1017605

External Source: SECTRACK

Name: 1017604

Hyperlink:http://securitytracker.com/id?1017604

External Source: OSVDB

Name: 33039

Hyperlink:http://osvdb.org/33039

External Source: IDEFENSE

Name: 20070207 Trend Micro TmComm Local Privilege Escalation Vulnerability

Type: Advisory

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469

External Source: XF

Name: trendmicro-tmcomm-privilege-escalation(32353)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32353