CVE-2011-2893
IBM Lotus Symphony 3 - Denial of Service via DataPilot Large .xls Spreadsheet
Title source: llmDescription
The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference.
References (7)
Core 7
Core References
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21505448
Various Sources x_refsource_confirm
http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements
Various Sources x_refsource_confirm
https://www-304.ibm.com/jct03001c/software/lotus/symphony/idcontents/releasenotes/en/readme_embedded_in_fixpack3_long.htm
Various Sources x_refsource_confirm
http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/48936
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68748
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/74166
Scores
EPSS
0.0145
EPSS Percentile
70.7%
Details
CWE
CWE-399
Status
published
Products (3)
ibm/lotus_symphony
3.0.0
ibm/lotus_symphony
3.0.0.1
ibm/lotus_symphony
3.0.0.2
Published
Jul 27, 2011
Tracked Since
Feb 18, 2026