Trend Micro Security Multiple Vulnerabilities Fixed by 10.0.1265 and 8.0.2063
Description
(#Several vulnerabilities were reported in Trend Micro Security products.#A remote attacker could exploit them by enticing their victim into following a specially formed link in order to execute arbitrary code with NT\SYSTEM privileges.##These vulnerabilities, located in the HTTP daemon of the "CoreServiceShell" component, stem from:#multiple path traversal in "/loadhelp/" and "/wtp/"#an header injection in the URL parameter of the "continue/TiCredToken" web page#a cross-site scripting in the "loader.html" web page.##Proofs of concept are available.)
