Improper Input Validation in Enterprise Protection by Proofpoint

CVE-2024-10635

What is CVE-2024-10635?

Enterprise Protection by Proofpoint is affected by an improper input validation vulnerability in its attachment defense mechanism. This flaw allows an unauthenticated remote attacker to bypass established attachment scanning security policies by sending a malicious S/MIME attachment containing an opaque signature. If the recipient opens this malicious attachment in a downstream email client, it could lead to a partial loss of integrity and confidentiality within their system, potentially exposing sensitive information or facilitating further attacks.

References