CVE-2017-6324
HighSummary
The Symantec Messaging Gateway can process a corrupted Word file with potentially malicious macros despite the administrator having the 'disarm' functionality enabled. This constitutes a bypass of the application's disarm functionality.
Risk Assessment
The organization may be exposed to attacks using malicious macros in Word files, potentially leading to data breaches or system infections.
Recommendation
It is recommended to monitor and scan email attachments and consider additional security measures to minimize the risk associated with malicious files.
Other vulnerabilities in Symantec Messaging Gateway
See all- CVE-2017-6328High
The Symantec Messaging Gateway before version 10.6.3-267 is vulnerable to a cross site request forgery (CSRF) attack, which allows unauthorized commands to be transmitted from a user's trusted browser.
- CVE-2017-6326Critical
The Symantec Messaging Gateway can encounter an issue of remote code execution, allowing commands to be executed remotely on a target machine or in a target process.
Original NVD description (English source)
The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.