PT-2011-2436 · Ibm+2 · Lotus Freelance Graphics+4

Publicado

2011-07-18

·

Atualizado

2013-02-07

·

CVE-2011-0548

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Autonomy KeyView versions 6.x through 8.x Symantec Mail Security versions 6.x through 8.x Symantec Brightmail and Messaging Gateway versions prior to 9.5.1 Symantec Data Loss Prevention versions prior to 10.5.3 and versions 11.x prior to 11.1
Description The issue is related to a buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView. This can be exploited by remote attackers using a crafted .prz file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.
Recommendations For Autonomy KeyView versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Mail Security versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Brightmail and Messaging Gateway versions prior to 9.5.1, update to version 9.5.1 or later. For Symantec Data Loss Prevention versions prior to 10.5.3, update to version 10.5.3 or later. For Symantec Data Loss Prevention versions 11.x prior to 11.1, update to version 11.1 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-0548

Produtos afetados

Autonomy Keyview
Lotus Freelance Graphics
Symantec Brightmail/Messaging Gateway
Symantec Data Loss Prevention
Symantec Mail Security