CVE-2010-3407 Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remo...
HighCVSS 9.3
EPSS 41.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 8.0 | No fix listed |
| ibm lotus domino | = 8.0.1 | No fix listed |
| ibm lotus domino | = 8.0.2 | No fix listed |
| ibm lotus domino | = 8.0.2.1 | No fix listed |
| ibm lotus domino | = 8.0.2.2 | No fix listed |
| ibm lotus domino | = 8.0.2.3 | No fix listed |
| ibm lotus domino | = 8.0.2.4 | No fix listed |
| ibm lotus domino | = 8.5.0 | No fix listed |
| ibm lotus domino | = 8.5.0.1 | No fix listed |
| ibm lotus domino | = 8.5.1 | No fix listed |
| ibm lotus domino | = 8.5.1.1 | No fix listed |
References
- labs.mwrinfosecurity.com
- labs.mwrinfosecurity.com exploit
- 41433 third-party-advisory vendor-advisory
- 1024448 vdb-entry
- www-01.ibm.com vendor-advisory
- www-10.lotus.com vendor-advisory
- www-10.lotus.com vendor-advisory
- www-10.lotus.com vendor-advisory
- 15005 exploit
- 20100914 ZDI-10-177: IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability mailing-list
- 43219 vdb-entry
- ADV-2010-2381 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- lotus-domino-icalendar-bo(61790) vdb-entry