CVE-2017-14078

Published: Sep 22, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.

Affected (1)

Products: Trendmicro: Mobile Security

Trendmicro

1 product

Mobile Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Trendmicro Mobile Security	Version 9.7

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (134)

http://www.securityfocus.com/bid/100966

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-739

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-740

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-741

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-742

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-743

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-744

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-745

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-746

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-747

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-748

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-749

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-750

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-751

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-753

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-754

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-755

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-756

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-757

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-758

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-759

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-760

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-761

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-762

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-763

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-764

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-765

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-766

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-768

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-769

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-770

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-771

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-772

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-773

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-775

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-776

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-777

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-778

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-779

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-780

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-781

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-782

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-783

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-784

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-786

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-787

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-788

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-791

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-792

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-793

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-794

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-795

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-796

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-797

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-798

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-799

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-800

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-801

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-802

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-803

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-804

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-805

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-806

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-808

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-809

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-810

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

https://success.trendmicro.com/solution/1118224

Source: security@trendmicro.com

MitigationPatchVendor Advisory

http://www.securityfocus.com/bid/100966