CVE-2017-6324

7.3 highEPSS 1.3%

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.

Severity

CVSS 3.0

7.3 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2017-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:messaging_gateway

References

http://www.securityfocus.com/bid/98889
http://www.securitytracker.com/id/1038785
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00
http://www.securityfocus.com/bid/98889
http://www.securitytracker.com/id/1038785

Check your stack JSON