PT-2011-2436 · Ibm+2 · Lotus Freelance Graphics+4

Published 2011-07-18 · Updated 2013-02-07 · CVE-2011-0548

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Autonomy KeyView versions 6.x through 8.x Symantec Mail Security versions 6.x through 8.x Symantec Brightmail and Messaging Gateway versions prior to 9.5.1 Symantec Data Loss Prevention versions prior to 10.5.3 and versions 11.x prior to 11.1

Description The issue is related to a buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView. This can be exploited by remote attackers using a crafted .prz file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.

Recommendations For Autonomy KeyView versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Mail Security versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Brightmail and Messaging Gateway versions prior to 9.5.1, update to version 9.5.1 or later. For Symantec Data Loss Prevention versions prior to 10.5.3, update to version 10.5.3 or later. For Symantec Data Loss Prevention versions 11.x prior to 11.1, update to version 11.1 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0548

Affected Products

Autonomy Keyview

Lotus Freelance Graphics

Symantec Brightmail/Messaging Gateway

Symantec Data Loss Prevention

Symantec Mail Security

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-0548 · Security Note
• http://secunia.com/advisories/44779 · Vendor Advisory
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110531_00 · Note
• http://securitytracker.com/id?1025596 · Note
• http://securitytracker.com/id?1025594 · Note
• http://securitytracker.com/id?1025595 · Note