PT-2018-14409

CVE-2018-18328

·

Published

2018-10-19

·

Updated

2018-12-04

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac (Consumer) versions 7.0 and above
Description A privilege escalation issue exists due to the lack of proper validation of a user-supplied buffer at the 0x6F6A offset. This could allow a local attacker to escalate privileges on vulnerable installations, but the attacker must first obtain the ability to execute low-privileged code on the target system.
Recommendations For versions 7.0 and above, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
ZDI-18-1296
Found an issue in the description? Have something to add? Feel free to write us 👾