Trend Micro InterScan Web Security Virtual Appliance Stack Overflow (CVE-2020-28578; CVE-2020-28579)

A stack overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2020-28578

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

CVE-2020-28578

CVE-2020-28578 affects Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2. Multiple connected sources describe a vulnerability where an unauthenticated remote attacker could send a specially crafted HTTP message and achieve remote code execution with elevated privileges, via a buffer ov...