medium6.1
CVE-2016-1224
CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arb…
Impact
CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Worry-Free Business Security | Version 9.0 |
| Trendmicro | Worry-Free Business Security Services | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx
- http://jvn.jp/en/jp/JVN48847535/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089
- http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx
- http://jvn.jp/en/jp/JVN48847535/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089