VYPR
High severity7.3NVD Advisory· Published Jun 26, 2017· Updated May 13, 2026

CVE-2017-6324

CVE-2017-6324

Description

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.

Affected products

2
  • cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*
    Range: <=10.6.2
  • Symantec Corporation/Messaging Gatewayv5
    Range: All versions prior to version 10.6.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.