CVE-2017-11397 A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro encryption for email | <= 5.6.0.1073 | No fix listed |
| Trend Micro Encryption for Email | = 5.6 | No fix listed |
References
- fortiguard.com third-party-advisory
- success.trendmicro.com patch vendor-advisory