An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx | vendor advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-18-963/ | vdb entry third party advisory |