CVE-2007-0856: trend_micro client-server-messaging_security
Vulnerability summary
CVE-2007-0856 is a high (CVSS 7.2) vulnerability in trend_micro client-server-messaging_security. EPSS estimates a 0.95% chance of exploitation in the next 30 days, higher than 60.7% of scored vulnerabilities.
Timeline
- 08-02-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.95%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
0.00 pp
From 0.95% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend_micro7 products
- client-server-messaging_security3.5
- damage_cleanup_services3.2
- pc-cillin_internet_security2007
- tmcomm.sys1.5.1052
- trend_micro_antispyware3.0_sp2 | 3.2_sp1 | 3.5
1 vendor · 7 products
References
12 links- labs.idefense.com/intelligence/vulnerabilities/display.php?id=469Third Party AdvisoryX Refsource IDEFENSEVendor Advisory
- esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432X Refsource CONFIRMPatch