CVE-2017-11384 SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-...
CriticalCVSS 9.8
EPSS 38.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro control manager | = 6.0 | No fix listed |
References
- 100078 vdb-entry
- 1039049 vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- success.trendmicro.com patch vendor-advisory