CVE-2012-6277: Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for…

Description

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)8.1% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AK

Autonomy Keyview Idol · HP

before 10.16 · source: NVD

DL

Data Loss Prevention Endpoint · Symantec

11.0 before 11.6.1 · source: NVD

DL

Data Loss Prevention Enforce/detection Servers · Symantec

11.0 before 11.6.1; 11.0 before 11.6.1 · source: NVD

DO

Domino · Ibm

8.5.0 through 8.5.3.6 · source: NVD

MS

Mail Security · Symantec

through 6.5.7; through 8.1.0; 6.5.7 · source: NVD

MG

Messaging Gateway · Symantec

9.5 before 10.0.1 · source: NVD

NO

Notes · Ibm

8.5 through 8.5.3 · source: NVD