CVE:CVE-2007-0856
CNNVD:CNNVD-200702-149
Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 
 Trend Micro的病毒扫描引擎中所捆绑的TmComm.sys驱动没有对\\.\TmComm DOS设备接口设置安全的权限，对Everyone给予了写权限。这允许本地登录的用户通过IOCTL访问仅应由特权用户才能访问的功能。
 此外，这个DOS设备接口的IOCTL处理器没有验证对其传送的地址，允许在内核(RING 0)环境中覆盖任意内存或执行任意指令。
solution:Upgrade trend_micro client-server-messaging_security to a higher version than 3.5,and avoid the version 3.5; Upgrade trend_micro damage_cleanup_services to a higher version than 3.2,and avoid the version 3.2; Upgrade trend_micro pc-cillin_internet_security to a higher version than 2007,and avoid the version 2007; Upgrade trend_micro tmcomm.sys to a higher version than 1.5.1052,and avoid the version 1.5.1052; Upgrade trend_micro trend_micro_antirootkit_common_module to a higher version than *; Upgrade trend_micro trend_micro_antispyware to a higher version than 3.0_sp2,3.2_sp1,3.5,and avoid the version 3.0_sp2,3.2_sp1,3.5; Upgrade trend_micro trend_micro_antivirus to a higher version than 2007,and avoid the version 2007; Upgrade trend_micro vsapini.sys to a higher version than 3.320.1003,and avoid the version 3.320.1003