high7.2Public exploit code
CVE-2009-0686
The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Internet Security Pro 2009 - Priviliege Escalation2009-03-30 · local · windows · Verified
Impact
The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Internet Security | Versions 2008, 2009 |
Weakness classification
References
- NVD record
- CVE.org record
- http://en.securitylab.ru/lab/PT-2009-09
- http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip
- http://www.securityfocus.com/archive/1/502314/100/0/threaded
- http://www.securityfocus.com/bid/34304
- http://www.securitytracker.com/id?1021955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49513
- https://www.exploit-db.com/exploits/8322
- http://en.securitylab.ru/lab/PT-2009-09
- http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip
- http://www.securityfocus.com/archive/1/502314/100/0/threaded
- http://www.securityfocus.com/bid/34304
- http://www.securitytracker.com/id?1021955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49513
- https://www.exploit-db.com/exploits/8322