CVE-2011-1205
Last modified
CVE-2011-1205 is a vulnerability of currently unknown severity. Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Clearcase | 7.0.0.4 |
| Ibm | Rational Clearcase | 7.0.0.5 |
| Ibm | Rational Clearcase | 7.0.0.6 |
| Ibm | Rational Clearcase | 7.0.0.7 |
| Ibm | Rational Clearcase | 7.0.0.8 |
| Ibm | Rational Clearcase | 7.0.0.9 |
| Ibm | Rational Clearcase | 7.0.1 |
| Ibm | Rational Clearcase | 7.0.1.1 |
| Ibm | Rational Clearcase | 7.0.1.2 |
| Ibm | Rational Clearcase | 7.0.1.3 |
| Ibm | Rational Clearcase | 7.0.1.4 |
| Ibm | Rational Clearcase | 7.0.1.5 |
| Ibm | Rational Clearcase | 7.0.1.6 |
| Ibm | Rational Clearcase | 7.0.1.7 |
| Ibm | Rational Clearcase | 7.0.1.8 |
| Ibm | Rational Clearcase | 7.0.1.9 |
| Ibm | Rational Clearcase | 7.0.1.10 |
| Ibm | Rational Clearcase | 7.0.1.11 |
| Ibm | Rational Clearcase | 7.1 |
| Ibm | Rational Clearcase | 7.1.0.1 |
| Ibm | Rational Clearcase | 7.1.0.2 |
| Ibm | Rational Clearcase | 7.1.1 |
| Ibm | Rational Clearcase | 7.1.1.1 |
| Ibm | Rational Clearcase | 7.1.1.2 |
| Ibm | Rational Clearcase | 7.1.1.3 |
| Ibm | Rational Clearcase | 7.1.1.4 |
| Ibm | Rational Clearquest | 7.0.0.4 |
| Ibm | Rational Clearquest | 7.0.0.5 |
| Ibm | Rational Clearquest | 7.0.0.6 |
| Ibm | Rational Clearquest | 7.0.0.7 |
| Ibm | Rational Clearquest | 7.0.0.8 |
| Ibm | Rational Clearquest | 7.0.0.9 |
| Ibm | Rational Clearquest | 7.0.1 |
| Ibm | Rational Clearquest | 7.0.1.0 |
| Ibm | Rational Clearquest | 7.0.1.1 |
| Ibm | Rational Clearquest | 7.0.1.2 |
| Ibm | Rational Clearquest | 7.0.1.3 |
| Ibm | Rational Clearquest | 7.0.1.4 |
| Ibm | Rational Clearquest | 7.0.1.5 |
| Ibm | Rational Clearquest | 7.0.1.6 |
| Ibm | Rational Clearquest | 7.0.1.7 |
| Ibm | Rational Clearquest | 7.0.1.8 |
| Ibm | Rational Clearquest | 7.0.1.9 |
| Ibm | Rational Clearquest | 7.0.1.10 |
| Ibm | Rational Clearquest | 7.0.1.11 |
| Ibm | Rational Clearquest | 7.1 |
| Ibm | Rational Clearquest | 7.1.0.1 |
| Ibm | Rational Clearquest | 7.1.0.2 |
| Ibm | Rational Clearquest | 7.1.1.1 |
| Ibm | Rational Clearquest | 7.1.1.2 |
Showing 50 of 66 affected configurations. See NVD for the full list.
References
- http://www.ibm.com/support/docview.wss?uid=swg21470998Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21470998Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-1205?
How severe is CVE-2011-1205?
How do I fix CVE-2011-1205?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-1199Google Chrome before 10.0.648.127 does not properly handle D…
- CVE-2011-1200Google Chrome before 10.0.648.127 does not properly perform …
- CVE-2011-1201The context implementation in WebKit, as used in Google Chro…
- CVE-2011-1202The xsltGenerateIdFunction function in functions.c in libxsl…
- CVE-2011-1203Google Chrome before 10.0.648.127 does not properly handle S…
- CVE-2011-1204Google Chrome before 10.0.648.127 does not properly handle a…
- CVE-2011-1206Stack-based buffer overflow in the server process in ibmslap…
- CVE-2011-1207The ActiveBar1 ActiveX control in the Data Dynamics ActiveBa…
- CVE-2011-1208IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1…
- CVE-2011-1209IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 a…
- CVE-2011-1213Integer underflow in lzhsr.dll in Autonomy KeyView, as used …
- CVE-2011-1214Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView…
Are you affected by CVE-2011-1205?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
