CVE-2017-6324: The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corru...

Security readout for executives and security teams

Symantec Messaging Gateway could fail to neutralize a specially malformed Word attachment even when the administrator enabled its disarm feature. The business risk is that email security controls may have allowed macro-capable documents through, increasing phishing and malware exposure for organizations relying on this gateway. Exposure is likely limited to organizations running Symantec Messaging Gateway before version 10.6.3 with the disarm feature used for Word attachments. Risk is higher where email is a primary malware delivery path and downstream macro controls are weak. Prioritize remediation if Symantec Messaging Gateway handles inbound email and is below 10.6.3. This is not proven actively exploited in the provided sources, but it weakens a key email malware control and should be treated as a practical phishing-defense gap. Mitigation focus: Upgrade Symantec Messaging Gateway to version 10.6.3 or later where supported.; Review the Symantec advisory for vendor-specific update and configuration guidance.; Treat disarm as insufficient for Word attachments until affected gateways are remediated..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.