Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."

Published

2020-02-21T17:15:10.883

Last Modified

2024-11-21T01:45:58.210

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	domino	≤ 8.5.3.6	Yes
Application	ibm	notes	≤ 8.5.3	Yes
Application	symantec	data_loss_prevention_endpoint	< 11.6.1	Yes
Application	symantec	data_loss_prevention_enforce\/detection_servers	< 11.6.1	Yes
Application	symantec	data_loss_prevention_enforce\/detection_servers	< 11.6.1	Yes
Application	symantec	mail_security	≤ 6.5.7	Yes
Application	symantec	mail_security	≤ 8.1.0	Yes
Application	symantec	mail_security	6.5.7	Yes
Application	symantec	messaging_gateway	< 10.0.1	Yes
Application	hp	autonomy_keyview_idol	< 10.16	Yes

References

https://support.symantec.com/us/en/article.symsa1262.html Vendor Advisory ([email protected])
https://tools.cisco.com/security/center/viewAlert.x?alertId=27482 Third Party Advisory ([email protected])
https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277 Third Party Advisory ([email protected])
https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities Third Party Advisory, US Government Resource ([email protected])
https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-addressed-in-ibm-notes-9-0-cve-2011-3026-cve-2012-6349-cve-2012-6277/ Vendor Advisory ([email protected])
https://www.kb.cert.org/vuls/id/849841/ Third Party Advisory, US Government Resource ([email protected])
https://www.securityfocus.com/bid/56610 Third Party Advisory, VDB Entry ([email protected])
https://www.tenable.com/plugins/nessus/67192 Third Party Advisory ([email protected])
https://support.symantec.com/us/en/article.symsa1262.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/viewAlert.x?alertId=27482 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-addressed-in-ibm-notes-9-0-cve-2011-3026-cve-2012-6349-cve-2012-6277/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.kb.cert.org/vuls/id/849841/ Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://www.securityfocus.com/bid/56610 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.tenable.com/plugins/nessus/67192 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)