CVE-2017-14082

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.

Score

CVSS 3.0 7.5 High

Status

Modified - security@trendmicro.com

Published

2018-01-19

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Trend Micro Mobile Security Enterprise (Trend Micro)
• Mobile Security (Trendmicro)

References

• http://www.securityfocus.com/bid/102216
• http://www.zerodayinitiative.com/advisories/ZDI-17-972/
• https://success.trendmicro.com/solution/1118993