PT-2011-3341 · Emc+1 · Emc Documentum Eroom+1

Stephen Fewer · Published 2011-07-18 · Updated 2018-10-09 · CVE-2011-1741

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions 7.x through 7.4.3.e

Description A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code by sending a crafted message over TCP. This issue affects the Indexing Server in EMC Documentum eRoom, specifically in the OpenText Hummingbird Client Connector.

Recommendations For versions 7.x through 7.4.3.e, update to version 7.4.3.f or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1741

ZDI-11-236

Affected Products

Emc Documentum Eroom

Opentext Hummingbird Client Connector

References · 8

• https://zerodayinitiative.com/advisories/ZDI-11-236 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1741 · Security Note
• http://securitytracker.com/id?1025790 · Note
• http://securityfocus.com/bid/48712 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-236 · Note
• http://securityreason.com/securityalert/8311 · Note
• http://securityfocus.com/archive/1/518897/100/0/threaded · Note
• http://securityfocus.com/archive/1/518913/100/0/threaded · Note