CVE-2017-14079

CVE-2017-14079: vulnerability in Trend Micro Mobile Security (Enterprise)

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 11%
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Affected products
Trend Micro · Mobile Security (Enterprise)
Related CVEs — Trend Micro Mobile Security (Enterprise)

In the same product, most dangerous first.

CVE-2017-14078—CVE-2017-14078EPSS 50.2%CVE-2017-14080—CVE-2017-14080EPSS 3.0%
References
https://success.trendmicro.com/solution/1118224http://www.securityfocus.com/bid/100970http://www.zerodayinitiative.com/advisories/ZDI-17-785http://www.zerodayinitiative.com/advisories/ZDI-17-789http://www.zerodayinitiative.com/advisories/ZDI-17-790http://www.zerodayinitiative.com/advisories/ZDI-17-807