CVE-2018-3608 A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could....
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro antivirus + security | <= 12.0.1191 | No fix listed |
| trendmicro internet security | <= 12.0.1191 | No fix listed |
| trendmicro maximum security | <= 12.0.1191 | No fix listed |
| trendmicro premium security | <= 12.0.1191 | No fix listed |
| trendmicro officescan | = 11.0 | No fix listed |
| trendmicro officescan | = 12.0 | No fix listed |
| trendmicro officescan monthly | = 11.0 | No fix listed |
| trendmicro officescan monthly | = 12.0 | No fix listed |
| Trend Micro Maximum Security (Consumer) | = 2018 (12.0.1191) | No fix listed |
References
- esupport.trendmicro.com vendor-advisory
- esupport.trendmicro.com vendor-advisory