CVE-2012-6277

HIGH

IBM Domino 8.5.0-8.5.3.5 - Remote Code Execution via Crafted File

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."

References (8)

Core 8
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.kb.cert.org/vuls/id/849841/
Third Party Advisory x_refsource_misc
https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277
Third Party Advisory x_refsource_misc
https://www.tenable.com/plugins/nessus/67192
Third Party Advisory, VDB Entry x_refsource_misc
https://www.securityfocus.com/bid/56610
Third Party Advisory, US Government Resource x_refsource_misc
https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities

Scores

CVSS v3 7.8
EPSS 0.0325
EPSS Percentile 87.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (9)
hp/autonomy_keyview_idol < 10.16
ibm/domino 8.5.0 - 8.5.3.6
ibm/notes 8.5 - 8.5.3
symantec/data_loss_prevention_endpoint 11.0 - 11.6.1
symantec/data_loss_prevention_enforce\/detection_servers 11.0 - 11.6.1 (2 CPE variants)
symantec/mail_security 6.5.7
symantec/mail_security < 6.5.7
symantec/mail_security < 8.1.0
symantec/messaging_gateway 9.5 - 10.0.1
Published Feb 21, 2020
Tracked Since Feb 18, 2026