high7.8Public exploit code
CVE-2019-9491
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same dire…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution2019-10-21 · local · windows · Verified
Impact
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Anti-Threat Toolkit | through 1.62.0.1218 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt
- http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html
- http://seclists.org/fulldisclosure/2019/Oct/42
- http://seclists.org/fulldisclosure/2020/Jan/50
- https://seclists.org/bugtraq/2019/Oct/30
- https://seclists.org/bugtraq/2020/Jan/55
- https://success.trendmicro.com/solution/000149878
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt
- http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html
- http://seclists.org/fulldisclosure/2019/Oct/42
- http://seclists.org/fulldisclosure/2020/Jan/50
- https://seclists.org/bugtraq/2019/Oct/30
- https://seclists.org/bugtraq/2020/Jan/55
- https://success.trendmicro.com/solution/000149878