Details of VAR-201105-0266

ID

VAR-201105-0266

CVE

CVE-2011-2144

TITLE

IBM Datacap Taskmaster Capture eDocument Conversion Operation Denial of Service Vulnerability

Trust: 0.8

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-1920

DESCRIPTION

The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file. IBM Datacap Taskmaster Capture automates the document data entry process, reducing costs and improving document processing efficiency. A security vulnerability exists in the IBM Datacap Taskmaster Capture eDocument conversion operation that allows an attacker to crash an affected application. Datacap Taskmaster Capture 8.0.1 Fix Pack 1 is vulnerable; others may also be affected

Trust: 2.61

sources: NVD: CVE-2011-2144 // JVNDB: JVNDB-2011-004633 // CNVD: CNVD-2011-1920 // BID: 47912 // IVD: f5d4579c-2354-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-1920

AFFECTED PRODUCTS

vendor:	ibm	model:	datacap taskmaster capture	scope:	eq	version:	8.0.1	Trust: 1.6
vendor:	ibm	model:	datacap taskmaster capture	scope:	lte	version:	8.0.1	Trust: 1.0
vendor:	ibm	model:	datacap taskmaster capture fix pack	scope:	eq	version:	8.0.11	Trust: 0.9
vendor:	ibm	model:	datacap taskmaster capture	scope:	lte	version:	8.0.1 fp1	Trust: 0.8
vendor:	datacap taskmaster capture	model:	-	scope:	eq	version:	8.0.1	Trust: 0.2
vendor:	datacap taskmaster capture	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-1920 // BID: 47912 // JVNDB: JVNDB-2011-004633 // CNNVD: CNNVD-201105-195 // NVD: CVE-2011-2144

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2011-2144
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2011-2144
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201105-195
value:	MEDIUM
Trust: 0.6
IVD:	f5d4579c-2354-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2

nvd@nist.gov:	CVE-2011-2144
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
IVD:	f5d4579c-2354-11e6-abef-000c29c66e3d
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2011-004633 // CNNVD: CNNVD-201105-195 // NVD: CVE-2011-2144

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.8

sources: JVNDB: JVNDB-2011-004633 // NVD: CVE-2011-2144

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201105-195

TYPE

Resource management error

Trust: 0.8

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201105-195

CONFIGURATIONS

sources: JVNDB: JVNDB-2011-004633

PATCH

title:

http://www.ibm.com/support/docview.wss?uid=swg27021511

url:

http://www.ibm.com/support/docview.wss?uid=swg27021511

Trust: 0.8

sources: JVNDB: JVNDB-2011-004633

EXTERNAL IDS

db:	NVD	id:	CVE-2011-2144	Trust: 3.5
db:	BID	id:	47912	Trust: 1.3
db:	CNVD	id:	CNVD-2011-1920	Trust: 0.8
db:	CNNVD	id:	CNNVD-201105-195	Trust: 0.8
db:	JVNDB	id:	JVNDB-2011-004633	Trust: 0.8
db:	IVD	id:	F5D4579C-2354-11E6-ABEF-000C29C66E3D	Trust: 0.2

sources: IVD: f5d4579c-2354-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-1920 // BID: 47912 // JVNDB: JVNDB-2011-004633 // CNNVD: CNNVD-201105-195 // NVD: CVE-2011-2144

REFERENCES

url:	http://www.ibm.com/support/docview.wss?uid=swg27021511	Trust: 1.6
url:	http://www.securityfocus.com/bid/47912	Trust: 1.0
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/67504	Trust: 1.0
url:	http://www-01.ibm.com/support/docview.wss?uid=swg27021511	Trust: 0.9
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2144	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-2144	Trust: 0.8
url:	http://www.ibm.com	Trust: 0.3

sources: CNVD: CNVD-2011-1920 // BID: 47912 // JVNDB: JVNDB-2011-004633 // CNNVD: CNNVD-201105-195 // NVD: CVE-2011-2144

CREDITS

IBM

Trust: 0.3

sources: BID: 47912

SOURCES

db:	IVD	id:	f5d4579c-2354-11e6-abef-000c29c66e3d
db:	CNVD	id:	CNVD-2011-1920
db:	BID	id:	47912
db:	JVNDB	id:	JVNDB-2011-004633
db:	CNNVD	id:	CNNVD-201105-195
db:	NVD	id:	CVE-2011-2144

LAST UPDATE DATE

2025-04-11T23:05:49.394000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2011-1920	date:	2011-05-19T00:00:00
db:	BID	id:	47912	date:	2011-05-18T00:00:00
db:	JVNDB	id:	JVNDB-2011-004633	date:	2012-03-27T00:00:00
db:	CNNVD	id:	CNNVD-201105-195	date:	2011-05-17T00:00:00
db:	NVD	id:	CVE-2011-2144	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	IVD	id:	f5d4579c-2354-11e6-abef-000c29c66e3d	date:	2011-05-19T00:00:00
db:	CNVD	id:	CNVD-2011-1920	date:	2011-05-19T00:00:00
db:	BID	id:	47912	date:	2011-05-18T00:00:00
db:	JVNDB	id:	JVNDB-2011-004633	date:	2012-03-27T00:00:00
db:	CNNVD	id:	CNNVD-201105-195	date:	2011-05-17T00:00:00
db:	NVD	id:	CVE-2011-2144	date:	2011-05-16T18:55:01.557