Buffer Overflow Vulnerability in Trend Micro Maximum Security

CVE-2018-6232

Summary

A buffer overflow vulnerability has been identified in Trend Micro Maximum Security 2018, specifically concerning the processing of IOCTL 0x22205C by the tmnciesc.sys driver. This flaw allows a local attacker with existing low-privileged access to execute code that could lead to privilege escalation. To successfully exploit this vulnerability, an attacker must initially gain the ability to run low-privileged code on a vulnerable system, thereby enabling them to leverage this security flaw for unauthorized access.

References