Summary
This host is installed with IBM Lotus Symphony and is prone to integer overflow vulnerability.
Impact
Successful exploitation will allow attacker to execute arbitrary code in the context of affected applications. Failed exploit attempts will likely result in denial-of-service conditions.
Impact Level: Application
Solution
Upgrade to IBM Lotus Symphony version 3.0.1 or later, For updates refer to http://www.ibm.com/software/lotus/symphony/home.nsf/home
Insight
The flaw is due to an integer overflow error when processing embedded image objects. This can be exploited to cause a heap-based buffer overflow via a specially crafted JPEG object within a DOC file.
Affected
IBM Lotus Symphony versions 3.0.0 FP3 and prior.
References
Severity
Classification
-
CVE CVE-2012-0192 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Air Remote Code Execution Vulnerability -June13 (Mac OS X)
- Adobe AIR Multiple Vulnerabilities -02 April 13 (Mac OS X)
- Adobe AIR Multiple Vulnerabilities -01 April 13 (Windows)
- Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
- Adobe Acrobat Multiple Vulnerabilities April-2012 (Mac OS X)