PT-2017-9395 · Gigacc · Gigacc Office

Dongjoo Ha + 2 · Published 2017-08-02 · Updated 2017-08-04 · CVE-2016-7844

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GigaCC OFFICE versions 2.3 and earlier

Description The issue allows remote attackers to execute arbitrary OS commands via specially crafted mail templates.

Recommendations For GigaCC OFFICE versions 2.3 and earlier, update to a version later than 2.3 to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2016-7844

Affected Products

Gigacc Office

References · 5

• https://osv.dev/vulnerability/CVE-2016-7844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7844 · Security Note
• http://securityfocus.com/bid/95680 · Note
• https://asp.gigacc.com/user/publicurl/view.do%3Bjsessionid=28438FE401A764B7CEDB3664AB2AC67C.ap04?job=view&direct=true&TI=9l1sf6jfp0bafkv9bh2e5fs43k&ID=9qbnmp2qetc5u9vc8crqbl804s · Note
• https://jvn.jp/en/vu/JVNVU91417143/index.html · Note