CVE-2012-6277: hp autonomy_keyview_idol
Vulnerability summary
CVE-2012-6277 is a high (CVSS 9.3) vulnerability in hp autonomy_keyview_idol. EPSS estimates a 8.12% chance of exploitation in the next 30 days, higher than 94.7% of scored vulnerabilities.
Timeline
- 21-02-2020PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
8.12%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 8.12% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec4 products
- data_loss_prevention_endpoint≥ 11.0, < 11.6.1
- data_loss_prevention_enforce\/detection_servers≥ 11.0, < 11.6.1
- mail_security≤ 6.5.7 | ≤ 8.1.0 | 6.5.7
- messaging_gateway≥ 9.5, < 10.0.1
Hp1 product
- autonomy_keyview_idol< 10.16
3 vendors · 7 products
References
8 links- www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilitiesX Refsource MISCThird Party AdvisoryUS Government Resource