CVE-2011-1205

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-29 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.

Affected products

IBM Rational ClearCase: 7.0.0.4, 7.0.0.5, 7.0.0.6, 7.0.0.7, 7.0.0.8, 7.0.0.9 (+20)
IBM Rational ClearQuest: 7.0.0.4, 7.0.0.5, 7.0.0.6, 7.0.0.7, 7.0.0.8, 7.0.0.9 (+20)
IBM Rational Common Licensing: 7.0, 7.0.0.1, 7.0.0.2, 7.0.1, 7.0.1.1, 7.0.3.1 (+8)

References

http://www.ibm.com/support/docview.wss?uid=swg21470998
http://www.securitytracker.com/id?1025268
http://www.securitytracker.com/id?1025269
http://www.vupen.com/english/advisories/2011/0832
https://exchange.xforce.ibmcloud.com/vulnerabilities/66304
https://exchange.xforce.ibmcloud.com/vulnerabilities/66324
http://www.ibm.com/support/docview.wss?uid=swg21470998
http://www.securitytracker.com/id?1025268
http://www.securitytracker.com/id?1025269
http://www.vupen.com/english/advisories/2011/0832
https://exchange.xforce.ibmcloud.com/vulnerabilities/66304
https://exchange.xforce.ibmcloud.com/vulnerabilities/66324

Get alerted when CVE-2011-1205 or the next vulnerability affects your stack