CVE-2019-19697

Related Files

Trend Micro Security 2019 Security Bypass Protected Service Tampering

Posted Jan 17, 2020

Authored by hyp3rlinx | Site hyp3rlinx.altervista.org

Trend Micro Maximum Security is vulnerable to arbitrary code execution as it allows for creation of registry key to target a process running as SYSTEM. This can allow a malware to gain elevated privileges to take over and shutdown services that require SYSTEM privileges like Trend Micros "Asmp" service "coreServiceShell.exe" which does not allow Administrators to tamper with them. This could allow an attacker or malware to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. Note administrator privileges are required to exploit this vulnerability.

tags | exploit, arbitrary, registry, code execution

advisories | CVE-2019-19697

SHA-256 | 2bef0a7498592f26d2748979ed451cc8771185733de0a4a4c86834cf8e60b081

Download | Favorite | View