CVE-2017-11384: SQL Injection
Published Aug 2, 2017
·Updated
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.
Affected Software
1 affected component
trendmicro Control Manager=6.0
Remediation
Patch Available
Event History
Aug 2, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11384?
CVE-2017-11384 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2017-11384?
To fix CVE-2017-11384, update Trend Micro Control Manager to the latest version that addresses this vulnerability.
3
What vulnerabilities does CVE-2017-11384 exploit?
CVE-2017-11384 exploits SQL injection vulnerabilities caused by improper user input validation in mdHandlerLicenseManager.dll.
4
What versions are affected by CVE-2017-11384?
CVE-2017-11384 affects Trend Micro Control Manager version 6.0.
5
What impact does CVE-2017-11384 have on systems?
CVE-2017-11384 allows an attacker to execute arbitrary code on the affected system, leading to potential full system compromise.