CVE-2012-0192 | BDVDB-2026-48877 Detail

Description#

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/51591
http://secunia.com/advisories/47245
http://osvdb.org/78345
https://exchange.xforce.ibmcloud.com/vulnerabilities/72424
http://www-01.ibm.com/support/docview.wss?uid=swg21578684

Exploit#

No public exploit known

History#

Version 12012-01-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.