Description
Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.
References
- 6840 vdb-entry
- 10503 vdb-entry
- officescan-service-gain-privileges(16375) vdb-entry
- 20040609 Trend Officescan local privilege escalation mailing-list
- 11806 third-party-advisory
- http://uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118