Unrated severityNVD Advisory· Published Oct 30, 2007· Updated Apr 23, 2026
CVE-2007-4277
CVE-2007-4277
Description
The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality. NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.
Affected products
2- cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/27378nvdVendor Advisory
- esupport.trendmicro.com/support/viewxml.donvd
- esupport.trendmicro.com/support/viewxml.donvd
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
- securitytracker.com/idnvd
- www.securityfocus.com/bid/26209nvd
- www.vupen.com/english/advisories/2007/3627nvd
News mentions
0No linked articles in our index yet.