CVE-2017-11397

A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.

Score

CVSS 3.0 7.8 High

Status

Modified - security@trendmicro.com

Published

2017-12-16

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Trend Micro Encryption For Email (Trend Micro)
• Encryption For Email (Trendmicro)

References

• https://fortiguard.com/zeroday/FG-VD-17-079
• https://success.trendmicro.com/solution/1118796