Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2011-1205

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

IBM Rational Licensing是一款用于多个IBM产品的许可证管理机制。 IBM Rational ClearCase 7.0.0.4至7.1.1.4版本，ClearQuest 7.0.0.4至7.1.1.4版本的IBM Rational Licensing的windows平台实现基于Microsoft COM架构，证书功能通过不同的4个COM对象提供给部分IBM Rational程序使用。这些COM对象存在缓冲区溢出漏洞，攻击者可以利用这些漏洞，构建特制的HTML文件，诱使用户在Inter

AI Predicted 4.3 Difficulty: Moderate EPSS 0.37% · P30
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2011-1205

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
IBM Rational ClearCase和ClearQuest Rational Common Licensing未明COM对象多个缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Rational Licensing是一款用于多个IBM产品的许可证管理机制。 IBM Rational ClearCase 7.0.0.4至7.1.1.4版本，ClearQuest 7.0.0.4至7.1.1.4版本的IBM Rational Licensing的windows平台实现基于Microsoft COM架构，证书功能通过不同的4个COM对象提供给部分IBM Rational程序使用。这些COM对象存在缓冲区溢出漏洞，攻击者可以利用这些漏洞，构建特制的HTML文件，诱使用户在Inter
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2011-1205

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1205

请登录查看更多情报信息。

Vendor Advisories for CVE-2011-1205 (6)

Same Patch Batch · n/a · 2011-03-29 · 8 CVEs total

CVE-2010-1674 Quagga bgpd extended-community解析器拒绝服务漏洞
CVE-2010-1675 Quagga bgpd拒绝服务漏洞
CVE-2011-0441 PHP 5 cron job任意文件删除漏洞
CVE-2011-0728 Michael Hudson-Doyle Loggerhead templatefunctions.py跨站脚本攻击漏洞
CVE-2011-0892 HP Diagnostics跨站脚本攻击漏洞
CVE-2011-1176 Apache HTTP Server 配置错误漏洞
CVE-2011-1472 Nokia E75固件锁定代码身份验证绕过漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1205

No comments yet

Leave a comment