PT-2011-2436

CVE-2011-0548

·

Published

2011-07-18

·

Updated

2013-02-07

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Autonomy KeyView versions 6.x through 8.x Symantec Mail Security versions 6.x through 8.x Symantec Brightmail and Messaging Gateway versions prior to 9.5.1 Symantec Data Loss Prevention versions prior to 10.5.3 and versions 11.x prior to 11.1
Description The issue is related to a buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView. This can be exploited by remote attackers using a crafted .prz file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.
Recommendations For Autonomy KeyView versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Mail Security versions 6.x through 8.x, update to a version outside of this range to mitigate the risk. For Symantec Brightmail and Messaging Gateway versions prior to 9.5.1, update to version 9.5.1 or later. For Symantec Data Loss Prevention versions prior to 10.5.3, update to version 10.5.3 or later. For Symantec Data Loss Prevention versions 11.x prior to 11.1, update to version 11.1 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾