CVE-2007-4474 Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attacker...
HighCVSS 9.3
EPSS 44.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm domino web access | = 6.0 | No fix listed |
| ibm domino web access | = 6.0.1 | No fix listed |
| ibm domino web access | = 6.0.1.1 | No fix listed |
| ibm domino web access | = 6.0.2 | No fix listed |
| ibm domino web access | = 6.0.3 | No fix listed |
| ibm domino web access | = 6.0.4 | No fix listed |
| ibm domino web access | = 6.0.5 | No fix listed |
| ibm domino web access | = 6.5 | No fix listed |
| ibm domino web access | = 6.5.1 | No fix listed |
| ibm domino web access | = 6.5.2 | No fix listed |
| ibm domino web access | = 6.5.3 | No fix listed |
| ibm domino web access | = 6.5.4 | No fix listed |
| ibm domino web access | = 6.5.5 | No fix listed |
| ibm domino web access | = 7.0 | No fix listed |
| ibm domino web access | = 7.0.1 | No fix listed |
| ibm lotus domino web access | = 7.0.1 | No fix listed |
| ibm lotus domino web access | = 7.0.34.1 | No fix listed |
References
- 20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption exploit mailing-list
- 40954 vdb-entry
- 28184 third-party-advisory vendor-advisory
- VU#963889 third-party-advisory us-government-resource
- 26972 exploit vdb-entry
- 1019138 vdb-entry
- ADV-2007-4296 vdb-entry
- domino-dwa7w-bo(39175) vdb-entry
- 4818 exploit
- 4820 exploit
- 5111 exploit