CVE ID | CVE-2017-14082 |
CVSS SCORE | 6.4, AV:N/AC:L/Au:N/C:P/I:N/A:P |
AFFECTED VENDORS |
Trend Micro |
AFFECTED PRODUCTS |
Mobile Security for Enterprise |
VULNERABILITY DETAILS |
The specific flaw exists within processing of the clt_report_sms_status action. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to disclose sensitive information in the context of the current process. |
ADDITIONAL DETAILS |
Trend Micro has issued an update to correct this vulnerability. More details can be found at:
https://success.trendmicro.com/solution/1118993 |
DISCLOSURE TIMELINE |
|
CREDIT | Steven Seeley (mr_me) of Offensive Security |