CVE-2012-0192 in Lotus Symphony

Sumário (Inglês)

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

14/12/2011

Divulgação

23/01/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
4569	IBM Lotus Symphony Execução remota de código	189	Não provado	Correção oficial	CVE-2012-0192

Fontes

• MITRE
• NVD
• CVE Details