Trend Micro Mobile Security Information Disclosure and Denial of Service Vulnerabilities

Bugtraq ID:	102216
Class:	Design Error
CVE:	CVE-2017-14082
Remote:	Yes
Local:	No
Published:	Dec 13 2017 12:00AM
Updated:	Dec 19 2017 09:01PM
Credit:	Steven Seeley (mr_me) of Offensive Security
Vulnerable:	Trend Micro Mobile Security (Enterprise) 9.7 Trend Micro Mobile Security (Enterprise) 9.6.SP1 Trend Micro Mobile Security (Enterprise) 9.6 Trend Micro Mobile Security (Enterprise) 9.5 Trend Micro Mobile Security (Enterprise) 9.3 Trend Micro Mobile Security (Enterprise) 9.2 Trend Micro Mobile Security (Enterprise) 9.1 Trend Micro Mobile Security (Enterprise) 9.0.SP2 Trend Micro Mobile Security (Enterprise) 9.0.SP1 Trend Micro Mobile Security (Enterprise) 9.0 Trend Micro Mobile Security (Enterprise) 8.0.SP1 Trend Micro Mobile Security (Enterprise) 8.0 Trend Micro Mobile Security (Enterprise) 7.1 Trend Micro Mobile Security (Enterprise) 5.5
Not Vulnerable:	Trend Micro Mobile Security (Enterprise) 9.7 CP B2455

Trend Micro Mobile Security Information Disclosure and Denial of Service Vulnerabilities

Trend Micro Mobile Security is prone to an information-disclosure vulnerability and a denial-of-service vulnerability

Successfully exploiting these issues may allow an attacker to gain access to sensitive information or cause denial of service conditions.

Trend Micro Mobile Security Information Disclosure and Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro Mobile Security Information Disclosure and Denial of Service Vulnerabilities

References:

• Trend Micro Homepage (Trend Micro)
  
• Trend Micro Mobile Security (Enterprise) (trendmicro)
  
• Trend Micro Mobile Security for Enterprise clt_report_sms_status Uninitialized (Trend Micro)