CVEvulnerability
CVE-2011-2739
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file.
Affected configurations
• emc documentum eroom 7.3.0
• emc documentum eroom 7.4.1
• emc documentum eroom 7.4.2
• emc documentum eroom 7.4.3
Related
Weakness · not in database (1)
References
- http://securityreason.com/securityalert/8528 securityreason.com
- http://www.securityfocus.com/archive/1/520372 www.securityfocus.com
- http://securityreason.com/securityalert/8528 securityreason.com
- http://www.securityfocus.com/archive/1/520372 www.securityfocus.com