A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
References
| Link | Resource |
|---|---|
| https://helpcenter.trendmicro.com/en-us/article/tmka-10867 | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1536/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Dec 2021, 13:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://helpcenter.trendmicro.com/en-us/article/tmka-10867 - Vendor Advisory | |
| References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-1536/ - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:trendmicro:premium_security_2021:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:trendmicro:antivirus\+_security_2021:*:*:*:*:*:*:*:* cpe:2.3:a:trendmicro:maximum_security_2021:*:*:*:*:*:*:*:* cpe:2.3:a:trendmicro:internet_security_2021:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 3.6
v3 : 7.1 |
| CWE | CWE-59 |
16 Dec 2021, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-16 03:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-44023
Mitre link : CVE-2021-44023
CVE.ORG link : CVE-2021-44023
JSON object : View
Products Affected
microsoft
- windows
trendmicro
- premium_security_2021
- antivirus\+_security_2021
- internet_security_2021
- maximum_security_2021
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')