CVE-2007-0856
highpriority · track · 29EPSS 0.010 · 61 %ileEUUSEPSS · scored 2026-10-28
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.1–7.2
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (11)
Products and version ranges known to be affected.
- trend micro client-server-messaging security= 3.5nvdUScpe:2.3:a:trend_micro:client-server-messaging_security:*:*:*:*:*:*:*:*
- trend micro damage cleanup services= 3.2nvdUScpe:2.3:a:trend_micro:damage_cleanup_services:*:*:*:*:*:*:*:*
- trend micro pc-cillin internet security= 2007nvdUScpe:2.3:a:trend_micro:pc-cillin_internet_security:*:*:*:*:*:*:*:*
- trend micro trend micro antirootkit common moduleall versionsnvdUScpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:*
- trend micro trend micro antispyware= 3.0_sp2nvdUScpe:2.3:a:trend_micro:trend_micro_antispyware:*:*:*:*:*:*:*:*
- trend micro trend micro antispyware= 3.2_sp1nvdUScpe:2.3:a:trend_micro:trend_micro_antispyware:*:*:*:*:*:*:*:*
- trend micro trend micro antispyware= 3.5nvdUScpe:2.3:a:trend_micro:trend_micro_antispyware:*:*:*:*:*:*:*:*
- trend micro trend micro antivirus= 2007nvdUScpe:2.3:a:trend_micro:trend_micro_antivirus:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (24)
External citations — patches, advisories, analysis.
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432enisa_euvd
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469enisa_euvd
- http://osvdb.org/33039enisa_euvd
- http://secunia.com/advisories/24069enisa_euvd
- http://securitytracker.com/id?1017604enisa_euvd
- http://securitytracker.com/id?1017605enisa_euvd
- http://securitytracker.com/id?1017606enisa_euvd
- http://www.kb.cert.org/vuls/id/282240enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan