IBM Lotus Symphony vulnerabilities

8 CVEs affecting IBM Lotus Symphony, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-5204, published 2012-09-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0192, published 2012-01-23. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2)…
CVE-2011-2884, published 2011-07-27. High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."
CVE-2011-2888, published 2011-07-27. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.
CVE-2011-2887, published 2011-07-27. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document.
CVE-2011-2885, published 2011-07-27. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.
CVE-2011-2893, published 2011-07-27. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value…
CVE-2011-2886, published 2011-07-27. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets.
CVE-2010-5204, published 2012-09-06. Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the…