CVEvulnerability
CVE-2012-0192
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.
Affected configurations
• ibm lotus symphony (<= 3.0.0.3)
• ibm lotus symphony 1.3
• ibm lotus symphony 3.0.0.1
• ibm lotus symphony 3.0.0.2
Related
Weakness · not in database (1)
References
- http://osvdb.org/78345 osvdb.org
- http://secunia.com/advisories/47245 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21578684 Vendor Advisory
- http://www.securityfocus.com/bid/51591 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 exchange.xforce.ibmcloud.com
- http://osvdb.org/78345 osvdb.org
- http://secunia.com/advisories/47245 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21578684 Vendor Advisory
- http://www.securityfocus.com/bid/51591 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 exchange.xforce.ibmcloud.com