Unscored severity · published Apr 1, 2009
CVE-2009-0686
The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges…
–
CVSS
0.8%
EPSS
No
On KEV
Description
The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Internet Security · Trendmicro
2008; 2008; 2009; 2009 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0686
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0686
en.securitylab.ru
http://en.securitylab.ru/lab/PT-2009-09
Exploit
http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip
www.securityfocus.com
http://www.securityfocus.com/archive/1/502314/100/0/threaded
Exploit
http://www.securityfocus.com/bid/34304
www.securitytracker.com
http://www.securitytracker.com/id?1021955
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/49513
More from Internet Security
9.8
CVE-2018-3608
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially…
7.8
CVE-2024-23940
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying…
7.8
CVE-2018-18333
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate…
7.8
CVE-2018-15363
An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable…
7.8
CVE-2018-10514
A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable…