CVE:CVE-2018-6218
CNNVD:CNNVD-201802-873
Trend Micro User-Mode Hooking Module（UMH）是美国趋势科技（Trend Micro）公司的一款使用在Trend Micro产品中的用户模式挂接模块，为其它组件提供行为监控、预测性机器学习等API事件。
Trend Micro UMH中存在DLL劫持漏洞。攻击者可利用该漏洞执行任意代码。
solution:Upgrade trendmicro deep_security to a higher version than 10.0,10.1,and avoid the version 10.0,10.1; Upgrade trendmicro endpoint_sensor to a higher version than 1.6,and avoid the version 1.6; Upgrade trendmicro officescan to a higher version than 11.0,12.0,and avoid the version 11.0,12.0; Upgrade trendmicro security to a higher version than 12.0,and avoid the version 12.0; Upgrade trendmicro worry-free_business_security to a higher version than 9.5,and avoid the version 9.5