CVEvulnerability

CVE-2009-0686

7.2 HIGH Published 2009-04-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399

Description

The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.

Affected configurations

• trendmicro internet security 2008 • trendmicro internet security 2009

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-781 Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code weakness

References