CVE-2017-14088
HighSummary
CVE-2017-14088 concerns memory corruption vulnerabilities in Trend Micro OfficeScan 11.0 and XG that allow local attackers to execute arbitrary code and escalate privileges to kernel-reserved resources. Exploiting this vulnerability requires prior access to execute low-privileged code on the target system.
Risk Assessment
Organizations may face serious threats as attackers can gain access to critical system resources, potentially leading to full control over the system. This poses risks of data leakage and system integrity breaches.
Recommendation
It is recommended to update Trend Micro OfficeScan to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to systems should be implemented to minimize the risk of exploitation.
Other vulnerabilities in Trend Micro OfficeScan 11.0 and XG
See all- CVE-2017-14086High
The CVE-2017-14086 vulnerability in Trend Micro OfficeScan 11.0 and XG allows unauthenticated users to start the fcgiOfcDDA.exe process or cause potential INI corruption. This may lead to excessive disk space consumption on the server due to dump files from continuous HTTP requests.
- CVE-2017-14084High
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14083High
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.
- CVE-2017-14089Critical
Trend Micro OfficeScan 11.0 and XG have an Unauthorized Memory Corruption vulnerability that may allow remote unauthenticated users to access the OfficeScan server and target cgiShowClientAdm.exe, leading to memory corruption issues.
Original NVD description (English source)
Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.