U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2017-17689

Change History

Initial Analysis by NIST 6/27/2018 1:56:12 PM

Action Type Old Value New Value
Added CVSS V3

								
							
							
						
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Added CVSS V2

								
							
							
						
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Added CWE

								
							
							
						
CWE-310
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:9folders:nine:-:*:*:*:*:*:*:*
     *cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*
     *cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*
     *cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*
     *cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*
     *cpe:2.3:a:gnome:evolution:-:*:*:*:*:*:*:*
     *cpe:2.3:a:google:gmail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:notes:-:*:*:*:*:*:*:*
     *cpe:2.3:a:kde:kmail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:kde:trojita:-:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:outlook:2010:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*
     *cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*
     *cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*
     *cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*
     *cpe:2.3:a:ritlabs:the_bat:-:*:*:*:*:*:*:*
Changed Reference Type
http://www.securityfocus.com/bid/104165 No Types Assigned
http://www.securityfocus.com/bid/104165 Third Party Advisory, VDB Entry
Changed Reference Type
https://efail.de No Types Assigned
https://efail.de Exploit, Mitigation, Third Party Advisory
Changed Reference Type
https://news.ycombinator.com/item?id=17066419 No Types Assigned
https://news.ycombinator.com/item?id=17066419 Issue Tracking, Third Party Advisory
Changed Reference Type
https://pastebin.com/gNCc8aYm No Types Assigned
https://pastebin.com/gNCc8aYm Third Party Advisory
Changed Reference Type
https://twitter.com/matthew_d_green/status/996371541591019520 No Types Assigned
https://twitter.com/matthew_d_green/status/996371541591019520 Third Party Advisory
Changed Reference Type
https://www.synology.com/support/security/Synology_SA_18_22 No Types Assigned
https://www.synology.com/support/security/Synology_SA_18_22 Third Party Advisory