PT-2017-16998 · Symantec · Symantec Messaging Gateway

Published 2017-06-26 · Updated 2019-10-03 · CVE-2017-6324

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway (affected versions not specified)

Description The issue allows a malformed or corrupted Word file with a potentially malicious macro to bypass the 'disarm' functionality, despite the administrator having this functionality enabled. This enables the potentially malicious macro to be processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-6324

Affected Products

Symantec Messaging Gateway

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6324 · Security Note
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6324 · Vendor Advisory
• http://securitytracker.com/id/1038785 · Note
• http://securityfocus.com/bid/98889 · Note