First published: Wed Jul 27 2011(Updated: )
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Symphony | =3.0.0.1 | |
IBM Lotus Symphony | =3.0.0.2 | |
IBM Lotus Symphony | =3.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2888 is classified as a medium severity vulnerability due to its potential to cause denial of service.
To fix CVE-2011-2888, apply the latest fix pack for IBM Lotus Symphony, specifically FP3 or later.
CVE-2011-2888 affects IBM Lotus Symphony versions 3.0.0.1, 3.0.0.2, and the general 3.0.0 version.
CVE-2011-2888 allows attackers to perform a denial of service attack that causes the application to hang.
Yes, CVE-2011-2888 can be exploited remotely via complex graphics included in presentations.