CVE-2017-6324: Symantec Messaging Gateway

High severity, CVSS 7.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.

Affected products

• Symantec Messaging Gateway: up to and including 10.6.2

Published 2017-06-26. Last modified 2026-06-17.