Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2012-0192 Details

Description

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://osvdb.org/78345 CVE
http://secunia.com/advisories/47245 CVEVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72424 CVE
http://www-01.ibm.com/support/docview.wss?uid=swg21578684 CVEVendor Advisory
http://www.securityfocus.com/bid/51591 CVE

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-189Numeric Errors[email protected]

Affected Products

ProductVersions
ibm lotus symphony
<= 3.0.0.3
1.3
3.0.0.1
3.0.0.2

CPE

  • cpe:2.3:a:ibm:lotus_symphony:*:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_symphony:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_symphony:3.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_symphony:3.0.0.2:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2012-0192
NVD Published Date:
Jan 23, 2012
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2012-0192 Details - Not Deferred