CVE-2019-14685

Related Files

Trend Maximum Security 2019 Unquoted Search Path

Posted Aug 24, 2019

Authored by Silton Santos

Trend Maximum Security 2019 suffers from an unquoted search path vulnerability. This application provides an unquoted path in the parameter lpApplicationName of the function CreateProcessW during process create PwmConsole.exe --- which is triggered from the feature PC Health Checkup. If an attacker has write permissions to C:\ or C:\Program Files\, it could deliver an arbitrary executable named Program.exe or Trend.exe which would be executed by the coreServiceShell process. coreServiceShell is a privileged process that will run Program.exe with same privilege.

tags | advisory, arbitrary

advisories | CVE-2019-14685

SHA-256 | 52269680ae8182e23a23e0158bbab33cb0478d44d1cb16eba85bdedcdf6abff8

Download | Favorite | View