Login Request a demo
Unscored severity · published Jul 27, 2011
CVE-2011-2888
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation
–
CVSS
2.2%
EPSS
No
On KEV
Description
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LS
Lotus Symphony · Ibm
3.0.0; 3.0.0.1; 3.0.0.2 · source: NVD
Affected product
LS
Lotus Symphony
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2888
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2888
osvdb.org
http://osvdb.org/74165
www.ibm.com
http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements
www.ibm.com
http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg21505448
www.securityfocus.com
http://www.securityfocus.com/bid/48936
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/68888
More from Lotus Symphony
–
CVE-2010-5204
Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2)…
–
CVE-2012-0192
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an…
–
CVE-2011-2893
The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with…
–
CVE-2011-2887
IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document
–
CVE-2011-2886
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets