Views:

Release Date: January 17, 2019

CVE Vulnerability Identifiers: CVE-2018-18333

Platform: Windows OS

CVSS 3.0 Scores: 6.6

Severity Ratings: Medium


Summary

Trend Micro has released updated installer builds for the Trend Micro Security 2019 (version 15.0) family of consumer products which resolves a DLL hijacking vulnerability that could allow an attacker to escalate privileges on a vulnerable system that they would otherwise not have access to.

Affected versions

Product Affected Versions Platform Language(s)
Premium Security Versions below 15.0.0.1163 Microsoft Windows English
Maximum Security
Versions below 15.0.0.1163
Microsoft Windows English
Internet Security
Versions below 15.0.0.1163
Microsoft Windows English
Antivirus + Security
Versions below 15.0.0.1163
Microsoft Windows English

Solution

Product Updated Build Platform Language(s)
All Versions At or Above  15.0.0.1163 Microsoft Windows English

Trend Micro has addressed these vulnerabilities via updated installer builds that are available now for download. Customers are highly encouraged to upgrade to the latest version if they have not already done it

For complete instructions on how to upgrade, please visit our Knowledge Base article: How to upgrade Trend Micro Security for Windows to the latest version.

Vulnerability Details

The updated build resolves a DLL hijacking vulnerability that could allow a user to manipulate a specific DLL and escalate privileges on a vulnerable system.

Trend Micro has received no reports nor is aware of any actual attacks against the affected products related to this vulnerability at this time.

Mitigating Factors

Exploiting these types of vulnerabilities require that an attacker has access (physical or remote) to a vulnerable machine.

Even though an exploit may require several specific conditions to be met, Trend Micro strongly encourages customers to upgrade to the latest build as soon as possible.

Acknowledgement

Trend Micro would like to thank the following individuals and/or organizations for responsibly disclosing these issues and working with Trend Micro to help protect our customers:

  • Kağan IŞILDAK (@kaganisildak) of Gais Security

External References

The following advisories may be found by visiting the following sites:

Comments (2)
  • 1
  • 1
Home Support

Security Bulletin: Trend Micro Security (Consumer) 2019 DLL Hijacking Vulnerability

Release Date: January 17, 2019

CVE Vulnerability Identifiers: CVE-2018-18333

Platform: Windows OS

CVSS 3.0 Scores: 6.6

Severity Ratings: Medium


Summary

Trend Micro has released updated installer builds for the Trend Micro Security 2019 (version 15.0) family of consumer products which resolves a DLL hijacking vulnerability that could allow an attacker to escalate privileges on a vulnerable system that they would otherwise not have access to.

Affected versions

Product Affected Versions Platform Language(s)
Premium Security Versions below 15.0.0.1163 Microsoft Windows English
Maximum Security
Versions below 15.0.0.1163
Microsoft Windows English
Internet Security
Versions below 15.0.0.1163
Microsoft Windows English
Antivirus + Security
Versions below 15.0.0.1163
Microsoft Windows English

Solution

Product Updated Build Platform Language(s)
All Versions At or Above  15.0.0.1163 Microsoft Windows English

Trend Micro has addressed these vulnerabilities via updated installer builds that are available now for download. Customers are highly encouraged to upgrade to the latest version if they have not already done it

For complete instructions on how to upgrade, please visit our Knowledge Base article: How to upgrade Trend Micro Security for Windows to the latest version.

Vulnerability Details

The updated build resolves a DLL hijacking vulnerability that could allow a user to manipulate a specific DLL and escalate privileges on a vulnerable system.

Trend Micro has received no reports nor is aware of any actual attacks against the affected products related to this vulnerability at this time.

Mitigating Factors

Exploiting these types of vulnerabilities require that an attacker has access (physical or remote) to a vulnerable machine.

Even though an exploit may require several specific conditions to be met, Trend Micro strongly encourages customers to upgrade to the latest build as soon as possible.

Acknowledgement

Trend Micro would like to thank the following individuals and/or organizations for responsibly disclosing these issues and working with Trend Micro to help protect our customers:

  • Kağan IŞILDAK (@kaganisildak) of Gais Security

External References

The following advisories may be found by visiting the following sites:


Was this helpful?

  • It was very helpful.
  • It was helpful.
  • Just okay.
  • It was not helpful.
  • It wasn't helpful at all.
Messenger Icon
Need Help?

Call through our available hotlines to help your with your concerns.

calls-avatar

Talk to a Trend Micro Support Representative

Call through our available hotlines to help your with your concerns. Before contacting our support, make sure to prepare your Serial Number.

Select your country:

United States and Canada

United States and Canada
STANDARD SUPPORT
  • Monday to Friday 5:00 AM - 5:00 PM US Pacific
  • 1 (800) 864-6027
PREMIUM SUPPORT
  • 24 X 7
  • 1-877-275-8611

Australia

Australia
STANDARD SUPPORT
  • Monday to Friday 7:00 am - 7:00 pm (Sydney Time)
  • 1300 305 289
PREMIUM SUPPORT
  • 24 X 7
  • 1-800-653-607

Philippines

Philippines
STANDARD SUPPORT
  • Mon to Fri 8AM - 5PM (Manila Time)
  • 02-8-995-6240

New Zealand

New Zealand
STANDARD SUPPORT
  • Monday to Friday 7:00 am - 7:00 pm (Sydney Time)
  • 0800 004 633
STANDARD SUPPORT
  • 24 X 7
  • 0800 004 630

Malaysia

Malaysia
STANDARD SUPPORT
  • Monday to Friday 8:00am - 5:00pm Malaysia Time
  • 1-800-18-2288
STANDARD SUPPORT
  • 24 X 7
  • 1-800-18-7363

Singapore

Singapore
STANDARD SUPPORT
  • Monday to Friday 8:00am - 5:00pm Singapore Time
  • 1-800-888-6868
STANDARD SUPPORT
  • 24 X 7
  • 1-800-888-7363

India

India
STANDARD SUPPORT
  • Monday to Saturday 9:00AM to 6:00PM India Standard Time
  • 000-800-100-9467

United Kingdom

United Kingdom
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493381

Ireland

Ireland
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493381

Germany

Germany
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +49 81188990997

France

France
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +33 176686576

Italy

Italy
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +39 0292593400

Spain

Spain
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +34 913697128

Austria

Austria
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +49 81188990997

Belgium

Belgium
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Bulgaria

Bulgaria
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Cyprus

Cyprus
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Czech Republic

Czech Republic
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Denmark

Denmark
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Estonia

Estonia
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Finland

Finland
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Greece

Greece
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Hungary

Hungary
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Latvia

Latvia
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Luxembourg

Luxembourg
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Netherlands

Netherlands
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Norway

Norway
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Poland

Poland
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Portugal

Portugal
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Romania

Romania
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Russian Federation

Russian Federation
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Slovenia

Slovenia
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Sweden

Sweden
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Switzerland

Switzerland
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +49 81188990997

South Africa

South Africa
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Bahrain

Bahrain
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Israel

Israel
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Saudi Arabia

Saudi Arabia
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

Turkey

Turkey
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382

United Arab Emirates

United Arab Emirates
STANDARD SUPPORT
  • Monday to Friday 8:00 – 17:30 GMT
  • +44 2035493382
Hi there  👋

How can we help today? Click me to start chatting with support.

Close
Trend Micro Support

Our Support Representative will be with you shortly.

Product Image

Trend Micro Support

Usually replies in few minutes

Before we start. Kindly fill up details below

Please see our privacy policy for more information on howwe use your data.