Trend Micro Antivirus One Allowed Malicious Code Injection by Attackers

A major update for Trend Micro’s Antivirus One software has been launched.

This update tackles a critical vulnerability that could have allowed attackers to inject malicious code.

The vulnerability, named CVE-2024-34456, involves a custom dynamic library injection flaw that might empower an attacker to inject malicious code into the application’s environment.

All about this Vulnerability

Versions 3.10.3 and below of Trend Micro Antivirus One have a vulnerability allowing attackers to inject malicious code. Trend Micro hasn’t received reports of attacks, and the issue was reported by security researcher Raffaele Sabato.

Affected Version(S)

The vulnerability impacted Antivirus One for Mac versions 3.10.3 and earlier.

Recommendation

Trend Micro has released version 3.10.4 of Antivirus One for Mac, resolving this issue. Consequently, the company strongly advises all current users of Trend Micro Antivirus One on Mac to promptly install this update.