CVE-2017-14082

Опубликовано: 19 янв. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.

Ссылки

http://www.securityfocus.com/bid/102216
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-972/
Third Party Advisory
VDB Entry
https://success.trendmicro.com/solution/1118993
Third Party Advisory
http://www.securityfocus.com/bid/102216
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-972/
Third Party Advisory
VDB Entry
https://success.trendmicro.com/solution/1118993
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:trendmicro:mobile_security:*:*:*:*:enterprise:*:*:*

Версия до 9.7 (включая)

EPSS

Процентиль: 86%

0.02743

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-772w-c7mm-w6x3