TI-2010-04902 Aliases CVE-2010-5204 GHSA-qrj3-7cj9-qq29

Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900…

LOW 30Published 2012-09-06 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: —
Confidentiality · integrity · availability: Complete · Complete · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw, .sxg, or .sxw file. NOTE: some of these details are obtained from third party information.

Why it matters now

EPSS 0.00348 28th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ibm:lotus_symphony:1.3.0.20090908.0900:::::::*	1.3.0.20090908.0900	Vulnerable	IBM

cpe:2.3:a:ibm:lotus_symphony:1.3.0.20090908.0900:*:*:*:*:*:*:* Versions 1.3.0.20090908.0900 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2010-5204
2026-10-03 Alias added: GHSA-qrj3-7cj9-qq29

References

Other 1

http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bibm_lotus_symphony%5D_3-beta-4_insecure_dll_hijacking

TI-2012-00187 Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus… CVSS 2.0HIGH 9.3
TI-2011-02537 Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown… CVSS 2.0HIGH 10.0
TI-2011-02541 IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service… CVSS 2.0MEDIUM 4.3
TI-2011-02540 IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of… CVSS 2.0MEDIUM 4.3
TI-2011-02538 IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service… CVSS 2.0MEDIUM 4.3
TI-2011-02546 The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote… CVSS 2.0MEDIUM 4.3

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences