CVE-2017-14078

Description

SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.

Affected products

• Trend Micro / Mobile Security (Enterprise)< 9.7 Patch 3 – < 9.7 Patch 3

References

• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-766
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-769
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-770
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-809
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-744
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-742
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-787
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-800
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-773
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-778
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-763
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-764
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-747
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-771
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-805
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-739
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-806
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-783
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-780
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-788
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-749
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-804
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-759
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-803
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-757
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-777
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-768
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-745
• MISChttp://www.securityfocus.com/bid/100966
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-741
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-755
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-740
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-799
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-791
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-802
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-760
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-761
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-793
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-781
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-756
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-798
• MISChttps://success.trendmicro.com/solution/1118224
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-772
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-748
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-792
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-795
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-775
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-779
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-751
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-801
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-750
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-758
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-786
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-765
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-746
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-794
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-784
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-797
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-762
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-796
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-753
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-743
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-810
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-782
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-808
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-776
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-17-754