NVD

Id
86173  
Name
CVE-2017-9046  
Description
winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers the attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-03  
Published
2017-05-21  
Modified Date
2017-06-02  
Seq
2017-9046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419081 86173 CVE-2017-6952 97323  View
422784 86173 CVE-2017-0602 98141  View
422785 86173 CVE-2017-0602 https://source.android.com/security/bulletin/2017-05-01  View
422786 86173 CVE-2017-0602 98141  View
422787 86173 CVE-2017-0602 https://source.android.com/security/bulletin/2017-05-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68098 JVNDB-2017-004380 Pegasus Mail の winpm-32.exe におけるコードを実行される脆弱性 Pegasus Mail (別名 Pmail) の winpm-32.exe には、コードを実行される脆弱性が存在します。 CVE-2017-9046 0 CVE-2017-9046 86173 4.4 7.3 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004380.html 2017-05-19 2017-06-23 View