Tielei Wang has discovered a vulnerability in IBM Lotus Symphony, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer overflow error when processing embedded image objects. This can be exploited to cause a heap-based buffer overflow via a specially crafted e.g. JPEG object within a DOC file.

Successful exploitation may allow execution of arbitrary code, but requires tricking a user into opening a malicious file.

The vulnerability is confirmed in version 3.0.0 FP3 revision 20110707.1500. Other versions may also be affected.

Solution
Update to version 3.0.1.

Provided and/or discovered by
Tielei Wang via Secunia.

Original Advisory
http://www.ibm.com/support/docview.wss?uid=swg21578684

Deep Links
Links available to Secunia VIM customers