CVE-2014-9641 : The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows lo

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.

Published 2015-02-06 15:59:09

Updated 2015-02-09 16:02:17

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2014-9641

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-9641

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2014-9641

http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx

Page Not Found
Vendor Advisory
http://www.exploit-db.com/exploits/35962

Trend Micro 8.0.1133 (Multiple Products) - Local Privilege Escalation - Windows local Exploit
Exploit
http://www.greyhathacker.net/?p=818

Analysis Of An Interesting Windows Kernel Change Mitigating Vulnerabilities In Some Security Products | GreyHatHacker.NET
Exploit

CVEs referencing this url

Products affected by CVE-2014-9641

Trendmicro » Tmeext.sys
Versions up to, including, (<=) 2.0.0.1014
cpe:2.3:a:trendmicro:tmeext.sys:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2014-9641

Exploit prediction scoring system (EPSS) score for CVE-2014-9641

CVSS scores for CVE-2014-9641

CWE ids for CVE-2014-9641

References for CVE-2014-9641

Products affected by CVE-2014-9641