CVE-2017-11384

Description

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.

References

https://success.trendmicro.com/solution/1117722

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3011

http://www.zerodayinitiative.com/advisories/ZDI-17-494

http://www.securitytracker.com/id/1039049

http://www.securityfocus.com/bid/100078

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS