iDEFENSE Security Advisory 12.14.05 – Remote exploitation of a heap overflow in Trend Micro Inc.’s ServerProtect Management Console allows remote attackers to execute arbitrary code with the privileges of the underlying web server. The problem specifically exists within the isaNVWRequest.dll ISAPI application upon processing of large POST requests with wrapped length values. iDefense has confirmed the existence of this vulnerability in Trend Micro ServerProtect for Windows Management Console 5.58 running with Trend Micro Control Manager 2.5/3.0 and Trend Micro Damage Cleanup Server 1.1. It is suspected that earlier versions and versions for other platforms are vulnerable as well.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42309/12.14.05-3.txt
Source: https://packetstormsecurity.com/files/42309/iDEFENSE-Security-Advisory-2005-12-14.3.html