CVE-2017-6324: symantec corporation messaging gateway
Vulnerability summary
CVE-2017-6324 is a high (CVSS 7.5) vulnerability in symantec corporation messaging gateway. EPSS estimates a 1.30% chance of exploitation in the next 30 days, higher than 70% of scored vulnerabilities.
Timeline
- 26-06-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.30%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
0.00 pp
From 1.30% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec1 product
- messaging_gateway≤ 10.6.2
Symantec corporation1 product
- messaging gatewayAll versions prior to version 10.6.3
2 vendors · 2 products