CVE-2012-6349: Buffer Overflow
Published Jul 18, 2013
·Updated
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
Affected Software
19 affected components
Autonomy KeyView IDOL
IBM Lotus Notes=8.5
IBM Lotus Notes=8.5.0.0
IBM Lotus Notes=8.5.0.1
IBM Lotus Notes=8.5.1
IBM Lotus Notes=8.5.1.0
IBM Lotus Notes=8.5.1.1
IBM Lotus Notes=8.5.1.2
IBM Lotus Notes=8.5.1.3
IBM Lotus Notes=8.5.1.4
IBM Lotus Notes=8.5.1.5
IBM Lotus Notes=8.5.2.0
IBM Lotus Notes=8.5.2.1
IBM Lotus Notes=8.5.2.2
IBM Lotus Notes=8.5.2.3
IBM Lotus Notes=8.5.3
IBM Lotus Notes=8.5.3.1
IBM Lotus Notes=8.5.3.2
IBM Lotus Notes=8.5.3.3
Event History
Jul 18, 2013
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6349?
CVE-2012-6349 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2012-6349?
To fix CVE-2012-6349, upgrade IBM Notes to version 8.5.3 FP4 or later.
3
What systems are affected by CVE-2012-6349?
CVE-2012-6349 affects IBM Notes versions 8.5.x prior to 8.5.3 FP4 and Autonomy KeyView IDOL.
4
What can attackers do with CVE-2012-6349?
Attackers can exploit CVE-2012-6349 to execute arbitrary code on vulnerable systems via specially crafted .mdb files.
5
Is CVE-2012-6349 under active exploitation?
As of the latest reports, CVE-2012-6349 is known to be actively sought by attackers, warranting immediate attention.