PT-2011-2436
CVE-2011-0548
·
Publicado
2011-07-18
·
Atualizado
2013-02-07
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Autonomy KeyView versions 6.x through 8.x
Symantec Mail Security versions 6.x through 8.x
Symantec Brightmail and Messaging Gateway versions prior to 9.5.1
Symantec Data Loss Prevention versions prior to 10.5.3 and versions 11.x prior to 11.1
Description
The issue is related to a buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView. This can be exploited by remote attackers using a crafted .prz file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.
Recommendations
For Autonomy KeyView versions 6.x through 8.x, update to a version outside of this range to mitigate the risk.
For Symantec Mail Security versions 6.x through 8.x, update to a version outside of this range to mitigate the risk.
For Symantec Brightmail and Messaging Gateway versions prior to 9.5.1, update to version 9.5.1 or later.
For Symantec Data Loss Prevention versions prior to 10.5.3, update to version 10.5.3 or later.
For Symantec Data Loss Prevention versions 11.x prior to 11.1, update to version 11.1 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾