Описание
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.0.3 (включая)
Одно из
cpe:2.3:a:ibm:lotus_symphony:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_symphony:1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_symphony:3.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_symphony:3.0.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.05137
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-189
Связанные уязвимости
github
больше 4 лет назад
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.
EPSS
Процентиль: 92%
0.05137
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-189