Vulnerabilities > CVE-2004-2430 - Local Privilege Escalation vulnerability in Trend Micro OfficeScan

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
trend-micro
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.

Vulnerable Configurations

Part Description Count
Application
Trend_Micro
8

References