Buffer overflow in EMC Documentum Eroom

CVE-2011-1741

Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP.

Vulnerability class: Buffer Overflow

EPSS: 0.082 (94.3th percentile) — read the EPSS interpretation.

Affected products

Emc Documentum_eroom — versions 7.4.1, 7.4.2, 7.4.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

security_alert@emc.com (vdb-entry, x_refsource_BID)
security_alert@emc.com (x_refsource_MISC)
security_alert@emc.com (x_refsource_SREASON, third-party-advisory)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)