CVE-2012-6277

Published: Feb 21, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."

Affected (10)

Products: Ibm: Domino, Notes · Symantec: Data Loss Prevention Endpoint, Data Loss Prevention Enforce/detection Servers, Mail Security, Messaging Gateway · Hp: Autonomy Keyview Idol

2 products

4 products

Data Loss Prevention Endpoint

Data Loss Prevention Enforce/detection Servers

Messaging Gateway

1 product

Autonomy Keyview Idol

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Domino	From 8.5.0 to 8.5.3.6
Ibm Notes	From 8.5 to 8.5.3

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Symantec Data Loss Prevention Endpoint	From 11.0 to 11.6.1
Symantec Data Loss Prevention Enforce/detection Servers	From 11.0 to 11.6.1
Symantec Data Loss Prevention Enforce/detection Servers	From 11.0 to 11.6.1
Symantec Mail Security	Up to 8.1.0
Symantec Mail Security	Up to 6.5.7
Symantec Mail Security	Version 6.5.7
Symantec Messaging Gateway	From 9.5 to 10.0.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Hp Autonomy Keyview Idol	Before 10.16

References (16)

https://support.symantec.com/us/en/article.symsa1262.html

Source: cret@cert.org

Vendor Advisory

https://tools.cisco.com/security/center/viewAlert.x?alertId=27482

Source: cret@cert.org

Third Party Advisory

https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277

Source: cret@cert.org

Third Party Advisory

https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-addressed-in-ibm-notes-9-0-cve-2011-3026-cve-2012-6349-cve-2012-6277/

Source: cret@cert.org

Vendor Advisory

https://www.kb.cert.org/vuls/id/849841/

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

https://www.securityfocus.com/bid/56610

Source: cret@cert.org

Third Party AdvisoryVDB Entry

https://www.tenable.com/plugins/nessus/67192

Source: cret@cert.org

Third Party Advisory

https://support.symantec.com/us/en/article.symsa1262.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://tools.cisco.com/security/center/viewAlert.x?alertId=27482

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-addressed-in-ibm-notes-9-0-cve-2011-3026-cve-2012-6349-cve-2012-6277/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.kb.cert.org/vuls/id/849841/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.securityfocus.com/bid/56610

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.tenable.com/plugins/nessus/67192

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.