High severity7.8NVD Advisory· Published Oct 21, 2019· Updated Jun 17, 2026
CVE-2019-9491
CVE-2019-9491
Description
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:trendmicro:anti-threat_toolkit:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:anti-threat_toolkit:*:*:*:*:*:*:*:*range: <=1.62.0.1218
- (no CPE)range: <=1.62.0.1218
- (no CPE)range: Version 1.62.0.1218 and below
Patches
Vulnerability mechanics
References
7- packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2019/Oct/42nvdExploitMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2020/Jan/50nvdExploitMailing ListThird Party Advisory
- seclists.org/bugtraq/2019/Oct/30nvdExploitMailing ListThird Party Advisory
- seclists.org/bugtraq/2020/Jan/55nvdExploitMailing ListThird Party Advisory
- success.trendmicro.com/solution/000149878nvdVendor Advisory
- hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txtnvd
News mentions
0No linked articles in our index yet.