Lucene search

[email protected]CVE-2011-2885

HistoryJul 27, 2011 - 8:55 p.m.

CVE-2011-2885

2011-07-2720:55:03

CWE-399

[email protected]

web.nvd.nist.gov

ibm

lotus symphony

fp3

vulnerability

denial of service

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.033 Low

EPSS

Percentile

91.4%

JSON

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.

Affected configurations

NVD

Node

ibmlotus_symphonyMatch3.0.0

ibmlotus_symphonyMatch3.0.0.1

ibmlotus_symphonyMatch3.0.0.2

CPENameOperatorVersion
ibm:lotus_symphonyibm lotus symphonyeq3.0.0
ibm:lotus_symphonyibm lotus symphonyeq3.0.0.1
ibm:lotus_symphonyibm lotus symphonyeq3.0.0.2

CPE	Name	Operator	Version
ibm:lotus_symphony	ibm lotus symphony	eq	3.0.0
ibm:lotus_symphony	ibm lotus symphony	eq	3.0.0.1
ibm:lotus_symphony	ibm lotus symphony	eq	3.0.0.2

References

osvdb.org/74159

www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements

www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm

www.ibm.com/support/docview.wss?uid=swg21505448

www.securityfocus.com/bid/48936

exchange.xforce.ibmcloud.com/vulnerabilities/68891

www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.033 Low

EPSS

Percentile

91.4%

JSON

Related for CVE-2011-2885

prion1 cvelist1 nvd1 openvas4 nessus1