CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/78345
http://secunia.com/advisories/47245	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21578684	Vendor Advisory
http://www.securityfocus.com/bid/51591
https://exchange.xforce.ibmcloud.com/vulnerabilities/72424
http://osvdb.org/78345
http://secunia.com/advisories/47245	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21578684	Vendor Advisory
http://www.securityfocus.com/bid/51591
https://exchange.xforce.ibmcloud.com/vulnerabilities/72424

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:lotus_symphony::::::::
	cpe:2.3:a:ibm:lotus_symphony:1.3:::::::*
	cpe:2.3:a:ibm:lotus_symphony:3.0.0.1:::::::*
	cpe:2.3:a:ibm:lotus_symphony:3.0.0.2:::::::*

History

21 Nov 2024, 01:34

Type	Values Removed	Values Added
References	~~() http://osvdb.org/78345 -~~	() http://osvdb.org/78345 -
References	~~() http://secunia.com/advisories/47245 - Vendor Advisory~~	() http://secunia.com/advisories/47245 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21578684 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21578684 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/51591 -~~	() http://www.securityfocus.com/bid/51591 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 -

Information

Published : 2012-01-23 15:55

Updated : 2024-11-21 01:34

NVD link : CVE-2012-0192

Mitre link : CVE-2012-0192

CVE.ORG link : CVE-2012-0192

JSON object : View

Products Affected

ibm

lotus_symphony

CWE

CWE-189

Numeric Errors

{"id": "CVE-2012-0192", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-01-23T15:55:00.943", "references": [{"url": "http://osvdb.org/78345", "source": "psirt@us.ibm.com"}, {"url": "http://secunia.com/advisories/47245", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21578684", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/51591", "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72424", "source": "psirt@us.ibm.com"}, {"url": "http://osvdb.org/78345", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/47245", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21578684", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/51591", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72424", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de enteros en vclmi.dll en el m\u00f3dulo de biblioteca de clases visuales de IBM Lotus Symphony antes de v3.0.1 podr\u00edan permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un objeto de imagen (1) JPEG o (2) PNG integrado en un documento Symphony que desencadena un desbordamiento de buffer basado en memoria din\u00e1mica, tal y como se demuestra con un archivo .doc."}], "lastModified": "2024-11-21T01:34:33.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_symphony:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07FC4E0D-02AD-473D-8086-9613095D5209", "versionEndIncluding": "3.0.0.3"}, {"criteria": "cpe:2.3:a:ibm:lotus_symphony:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F12C267E-7032-4C81-BF4B-55FDBC443A31"}, {"criteria": "cpe:2.3:a:ibm:lotus_symphony:3.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A74E155-75B4-40E2-B3EE-4C0121159650"}, {"criteria": "cpe:2.3:a:ibm:lotus_symphony:3.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BE246EA-BC50-42BB-B630-836D84FE9CFA"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}