CVE-2007-0856
Description
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend_micro damage_cleanup_services | 3.2 | — |
| trend_micro client-server-messaging_security | 3.5 | — |
| trend_micro pc-cillin_internet_security | 2007 | — |
| trend_micro tmcomm.sys | 1.5.1052 | — |
| trend_micro trend_micro_antirootkit_common_module | No range specified | — |
| trend_micro trend_micro_antispyware | 3.0_sp2, 3.2_sp1, 3.5 | — |
| trend_micro trend_micro_antivirus | 2007 | — |
| trend_micro vsapini.sys | 3.320.1003 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.