Stack overflow

Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the 1 AttachmentTimes or 2 ImportTimes method...

DSquare Exploit Pack: D2SEC_QP2

Name| d2secqp2 ---|--- CVE| CVE-2012-2176 Exploit Pack| D2ExploitPack Description| IBM Lotus Quickr QP2 ActiveX Remote Code Execution Vulnerability Notes|...

CVE-2012-2176

CVE-2012-2176 is a heap/stack overflow in IBM Lotus Quickr qp2 ActiveX (qp2.dll) used by the Quickr 8.2.x series. The vulnerability, exploitable via long arguments to Attachment_Times or Import_Times in the qp2.cab ActiveX control, allows remote code execution on affected Windows systems. Public ...

CVE-2012-2176

Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the 1 AttachmentTimes or 2 ImportTimes method...

IBM Lotus Quickr 'qp2.cab' ActiveX控件栈缓冲区溢出漏洞

BUGTRAQ ID: 53678 CVE ID: CVE-2012-2176 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr for Domino 8.2在qp2.cab ActiveX控件的实现上存在边界错误导致的远程栈缓冲区溢出漏洞，攻击者可通过调用带有超长参数的"AttachmentTimes"或"ImportTimes"方法利用此漏洞造成栈缓冲区溢出，导致执行任意代码。 0 IBM Lotus Quickr 8.2 厂商补丁： IBM ---...

IBM Lotus QuickR qp2 ActiveX Buffer Overflow

This module exploits a buffer overflow vulnerability on the UploadControl ActiveX. The vulnerability exists in the handling of the "AttachmentTimes" property, due to the insecure usage of the swscanf. The affected ActiveX is provided by the qp2.dll installed with the IBM Lotus Quickr product. Thi...

IBM Lotus Symphony < 3.0.1 Embedded Image File Handling Remote Overflows

The version of IBM Lotus Symphony on the remote host was found to be earlier than 3.0.1. As such, it is reportedly affected by multiple integer overflows in vlcmi.dll. These vulnerabilities can be triggered by a malicious JPEG or PNG image object embedded in a .DOC file, resulting in arbitrary co...

IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities

The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...

IBM Lotus Symphony Detection

IBM Lotus Symphony, an office productivity suite, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59035; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"IBM Lotu...

Novell GroupWise / Oracle Outside In Lotus 123 v4 Parser Unspecified Remote Code Execution

The version of Novell GroupWise installed on the remote host uses a version of the Oracle Outside In library that has a flaw in its Lotus 123 v4 parser that could lead to arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58513;...

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Windows

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Linux

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

IBM Lotus Symphony

KLA10205 ACE vulnerability in IBM Lotus Symphony

Multiple integer overflows were found in IBM Lotus Symphony. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Symphony document. Original advisories - Related products IBM-Lotus-Symphony CVE list...

Oracle Outside In contains an exploitable vulnerability in Lotus 123 v4 parser

Overview Oracle Outside In contains an exploitable vulnerability in the Lotus 123 version 4 file parser, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of libraries that can decode over 500 different file...

IBM Lotus Domino Notes RPC Authentication Processing Denial of Service Vulnerability

IBM Lotus Domino Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1393

Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service daemon crash via a crafted Notes RPC packet...