CVE-2009-0612

Published: Feb 17, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

Affected (3)

Products: Trendmicro: Interscan Web Security Suite, Interscan Web Security Virtual Appliance

Trendmicro

2 products

Interscan Web Security Suite

Interscan Web Security Virtual Appliance

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Trendmicro Interscan Web Security Suite	Version 2.5
Trendmicro Interscan Web Security Suite	Version 3.1
Trendmicro Interscan Web Security Virtual Appliance	Version 3.1