CVE-2017-6324: vulnerability in Symantec Corporation Messaging Gateway
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.
Affected products
Symantec Corporation · Messaging GatewayRelated CVEs — Symantec Corporation Messaging Gateway
In the same product, most dangerous first.