Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-0548

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention (DLP) before 10.5.3 and 11.x before 11.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .prz file. NOTE: this may overlap CVE-2011-1217.

Published

2011-07-18T22:55:00.860

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	mail_security	6.0.0	Yes
Application	symantec	mail_security	7.5	Yes
Application	symantec	mail_security	8.0	Yes
Application	symantec	brightmail_and_messaging_gateway	≤ 9.5	Yes
Application	symantec	brightmail_and_messaging_gateway	4.0.0	Yes
Application	symantec	brightmail_and_messaging_gateway	4.1.0	Yes
Application	symantec	brightmail_and_messaging_gateway	5.0	Yes
Application	symantec	brightmail_and_messaging_gateway	7.7	Yes
Application	symantec	brightmail_and_messaging_gateway	8.0	Yes
Application	symantec	brightmail_and_messaging_gateway	9.0	Yes
Application	symantec	brightmail_and_messaging_gateway	9.0.1	Yes
Application	symantec	brightmail_and_messaging_gateway	9.0.2	Yes
Application	symantec	data_loss_prevention	≤ 10.5.2	Yes
Application	symantec	data_loss_prevention	7.0	Yes
Application	symantec	data_loss_prevention	7.1	Yes
Application	symantec	data_loss_prevention	7.2	Yes
Application	symantec	data_loss_prevention	8.0	Yes
Application	symantec	data_loss_prevention	8.1	Yes
Application	symantec	data_loss_prevention	8.1.1	Yes
Application	symantec	data_loss_prevention	9.0	Yes
Application	symantec	data_loss_prevention	10	Yes
Application	symantec	data_loss_prevention	10.5	Yes
Application	symantec	data_loss_prevention	10.5.1	Yes
Application	symantec	data_loss_prevention	11.0	Yes

References

http://secunia.com/advisories/44779 Vendor Advisory ([email protected])
http://securitytracker.com/id?1025594 ([email protected])
http://securitytracker.com/id?1025595 ([email protected])
http://securitytracker.com/id?1025596 ([email protected])
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110531_00 ([email protected])
http://secunia.com/advisories/44779 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1025594 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1025595 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1025596 (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110531_00 (af854a3a-2127-422b-91ae-364da2661108)