EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability

Bugtraq ID:	48712
Class:	Boundary Condition Error
CVE:	CVE-2011-1741
Remote:	Yes
Local:	No
Published:	Jul 18 2011 12:00AM
Updated:	Jul 18 2011 12:00AM
Credit:	Stephen Fewer of Harmony Security working with TippingPoint's Zero Day Initiative
Vulnerable:	EMC Documentum eRoom 7.4.2 EMC Documentum eRoom 7.4.1 EMC Documentum eRoom 7.4.3
Not Vulnerable:	EMC Documentum eRoom 7.4.3.f

EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability

EMC Documentum eRoom's indexing server is prone to a buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability

References:

• EMC Documentum eRoom (EMC)
  
• ESA-2011-022: EMC Documentum eRoom Indexing Server HummingBird Client Connector (EMC)
  
• EMC Documentum eRoom Indexing Server OpenText HummingBird Connector Remote Code (TippingPoint Zero Day Initiative)