CVE-2017-11397

Опубликовано: 16 дек. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.

Ссылки

https://fortiguard.com/zeroday/FG-VD-17-079
Third Party Advisory
https://success.trendmicro.com/solution/1118796
Patch
Vendor Advisory
https://fortiguard.com/zeroday/FG-VD-17-079
Third Party Advisory
https://success.trendmicro.com/solution/1118796
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:trendmicro:encryption_for_email:*:*:*:*:*:*:*:*

Версия до 5.6.0.1073 (включая)

EPSS

Процентиль: 67%

0.00548

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-5pr8-59j7-9w95