CoreCVE
Back

HIGH

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents

Published Aug 14, 2017

Description

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner synology
Published Aug 14, 2017
Updated Sep 17, 2024
Reserved Jul 10, 2017
Link CVE-2017-11150
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-11150
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-11150