TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the…
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend Micro PC-cillin Internet Security 2007, Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, Damage Cleanup Services 3.2, and possibly other products, assigns Everyone write permission for the \\.\TmComm DOS device interface, which allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:smb:*:*:*:*:* | 3.5 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:damage_cleanup_services:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:pc-cillin_internet_security:2007:*:*:*:*:*:*:* | 2007 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:tmcomm.sys:1.5.1052:*:*:*:*:*:*:* | 1.5.1052 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:* | all versions | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:trend_micro_antispyware:3.0_sp2:*:enterprise:*:*:*:*:* | 3.0_sp2 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:trend_micro_antispyware:3.2_sp1:*:smb:*:*:*:*:* | 3.2_sp1 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:trend_micro_antispyware:3.5:*:consumer:*:*:*:*:* | 3.5 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:trend_micro_antivirus:2007:*:*:*:*:*:*:* | 2007 | Vulnerable | Trend Micro |
| cpe:2.3:a:trend_micro:vsapini.sys:3.320.1003:*:*:*:*:*:*:* | 3.320.1003 | Vulnerable | Trend Micro |
- cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:smb:*:*:*:*:* Versions 3.5 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:damage_cleanup_services:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:pc-cillin_internet_security:2007:*:*:*:*:*:*:* Versions 2007 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:tmcomm.sys:1.5.1052:*:*:*:*:*:*:* Versions 1.5.1052 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:trend_micro_antirootkit_common_module:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:trend_micro_antispyware:3.0_sp2:*:enterprise:*:*:*:*:* Versions 3.0_sp2 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:trend_micro_antispyware:3.2_sp1:*:smb:*:*:*:*:* Versions 3.2_sp1 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:trend_micro_antispyware:3.5:*:consumer:*:*:*:*:* Versions 3.5 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:trend_micro_antivirus:2007:*:*:*:*:*:*:* Versions 2007 Vulnerable ·Trend Micro
- cpe:2.3:a:trend_micro:vsapini.sys:3.320.1003:*:*:*:*:*:*:* Versions 3.320.1003 Vulnerable ·Trend Micro
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-0856
- 2026-10-03 Alias added: GHSA-8whq-qmmg-8jxf
References
More Trend Micro Client-server-messaging Security vulnerabilities
- TI-2007-00316 Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl… CVSS 2.0HIGH 9.3
- TI-2008-02337 Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4… CVSS 2.0HIGH 10.0
Sources
- CVE-2007-0856 · CVE Program
- CVE-2007-0856 · NVD
- FIRST EPSS
- GHSA-8whq-qmmg-8jxf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences