CVE-2006-1381: Trend Micro OfficeScan

High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.

Affected products

• Trend Micro OfficeScan: version 5.5 only

Published 2006-03-24. Last modified 2026-06-16.