high7.8
CVE-2019-9492
A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the produ…
Impact
A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Officescan | Versions 11.0, xg |
Weakness classification
References
- NVD record
- CVE.org record
- https://success.trendmicro.com/solution/1123045
- https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itself
- https://success.trendmicro.com/solution/1123045
- https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itself