Headline
CVE-2021-44023: Security Bulletin: Trend Micro Maximum Security Link Following Denial-of-Service Vulnerability
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
LAST UPDATED: DEC 10, 2021
Release Date: December 10, 2021
Trend Micro Vulnerability Identifier: CVE-2021-44023
Platform(s): Windows OS
CVSS 3.0 Score: 2.8 (Low)
Summary
Trend Micro has released an updated version of the Trend Micro Security 2021 consumer family of products. This update resolves a link following denial-of-service (DoS) vulnerability.
Affected version(s)
PRODUCT
AFFECTED VERSION(S)
PLATFORM
LANGUAGE(S)
Premium Security
2021 (v17) and below
Microsoft Windows
English
Maximum Security
2021 (v17) and below
Microsoft Windows
English
Internet Security
2021 (v17) and below
Microsoft Windows
English
Antivirus+ Security
2021 (v17) and below
Microsoft Windows
English
Solution
Trend Micro has released a version to resolve this issue:
PRODUCT
AFFECTED VERSION(S)
PLATFORM
LANGUAGE(S)
All version above
2022 (v17.7)
Microsoft Windows
English
Vulnerability Details
This updated version resolves a vulnerability in the product that could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
Trend Micro has received no reports nor is aware of any actual attacks against the affected products related to this vulnerability at this time.
Acknowledgment
Trend Micro would like to thank Michael DePlante (@izobashi) of Trend Micro Zero Day Initiative), for responsibly disclosing this issue and working with Trend Micro to help protect our customers.
Additional Assistance
Customers who have questions are encouraged to contact Trend Micro technical support for further assistance.
External Reference
- ZDI-CAN-14587
How helpful was this article?
It wasn’t helpful at all.
Somewhat helpful.
Just okay.
It was somewhat helpful.
It was helpful.
*Feedback submitted will only be used as reference for future product, service and article improvements.