{ "CVE_data_meta" : { "ASSIGNER" : "security@trendmicro.com", "ID" : "CVE-2018-6234", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "Trend Micro Maximum Security", "version" : { "version_data" : [ { "version_value" : "2018" } ] } } ] }, "vendor_name" : "Trend Micro" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "Out-of-Bounds Read Information Disclosure" } ] } ] }, "references" : { "reference_data" : [ { "name" : "https://www.zerodayinitiative.com/advisories/ZDI-18-268/", "refsource" : "MISC", "url" : "https://www.zerodayinitiative.com/advisories/ZDI-18-268/" }, { "name" : "https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx", "refsource" : "CONFIRM", "url" : "https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx" } ] } }