Skip to content

CVE-2011-0915 Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes ca...

HighCVSS 10.0 EPSS 11.6%
Published
Updated
Exploit status
No public exploit known

Description

Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.

Affected products

ProductAffected versionsFixed in
ibm lotus domino <= 8.5.2.2 No fix listed
ibm lotus domino = 4.6.1 No fix listed
ibm lotus domino = 4.6.3 No fix listed
ibm lotus domino = 4.6.4 No fix listed
ibm lotus domino = 5.0 No fix listed
ibm lotus domino = 5.0.1 No fix listed
ibm lotus domino = 5.0.2 No fix listed
ibm lotus domino = 5.0.3 No fix listed
ibm lotus domino = 5.0.4 No fix listed
ibm lotus domino = 5.0.4a No fix listed
ibm lotus domino = 5.0.5 No fix listed
ibm lotus domino = 5.0.6 No fix listed
ibm lotus domino = 5.0.6a No fix listed
ibm lotus domino = 5.0.7 No fix listed
ibm lotus domino = 5.0.7a No fix listed
ibm lotus domino = 5.0.8 No fix listed
ibm lotus domino = 5.0.8a No fix listed
ibm lotus domino = 5.0.9 No fix listed
ibm lotus domino = 5.0.9a No fix listed
ibm lotus domino = 5.0.10 No fix listed
ibm lotus domino = 5.0.11 No fix listed
ibm lotus domino = 6.0 No fix listed
ibm lotus domino = 6.0.1 No fix listed
ibm lotus domino = 6.0.1.1 No fix listed
ibm lotus domino = 6.0.1.2 No fix listed
Show 49 more
ProductAffected versionsFixed in
ibm lotus domino = 6.0.1.3 No fix listed
ibm lotus domino = 6.0.2 No fix listed
ibm lotus domino = 6.0.2.1 No fix listed
ibm lotus domino = 6.0.2.2 No fix listed
ibm lotus domino = 6.0.2_cf2 No fix listed
ibm lotus domino = 6.0.3 No fix listed
ibm lotus domino = 6.0.4 No fix listed
ibm lotus domino = 6.0.5 No fix listed
ibm lotus domino = 6.5 No fix listed
ibm lotus domino = 6.5.0 No fix listed
ibm lotus domino = 6.5.1 No fix listed
ibm lotus domino = 6.5.2 No fix listed
ibm lotus domino = 6.5.2.1 No fix listed
ibm lotus domino = 6.5.3 No fix listed
ibm lotus domino = 6.5.3.1 No fix listed
ibm lotus domino = 6.5.4 No fix listed
ibm lotus domino = 6.5.4.1 No fix listed
ibm lotus domino = 6.5.4.2 No fix listed
ibm lotus domino = 6.5.4.3 No fix listed
ibm lotus domino = 6.5.5 No fix listed
ibm lotus domino = 6.5.6 No fix listed
ibm lotus domino = 7.0 No fix listed
ibm lotus domino = 7.0.1 No fix listed
ibm lotus domino = 7.0.1.1 No fix listed
ibm lotus domino = 7.0.2 No fix listed
ibm lotus domino = 7.0.2.1 No fix listed
ibm lotus domino = 7.0.2.2 No fix listed
ibm lotus domino = 7.0.2.3 No fix listed
ibm lotus domino = 7.0.3 No fix listed
ibm lotus domino = 7.0.3.1 No fix listed
ibm lotus domino = 7.0.4 No fix listed
ibm lotus domino = 7.0.4.1 No fix listed
ibm lotus domino = 7.0.4.2 No fix listed
ibm lotus domino = 8.0.1 No fix listed
ibm lotus domino = 8.0.2 No fix listed
ibm lotus domino = 8.0.2.1 No fix listed
ibm lotus domino = 8.0.2.2 No fix listed
ibm lotus domino = 8.0.2.3 No fix listed
ibm lotus domino = 8.0.2.4 No fix listed
ibm lotus domino = 8.0.2.5 No fix listed
ibm lotus domino = 8.0.2.6 No fix listed
ibm lotus domino = 8.5.1 No fix listed
ibm lotus domino = 8.5.1.1 No fix listed
ibm lotus domino = 8.5.1.2 No fix listed
ibm lotus domino = 8.5.1.3 No fix listed
ibm lotus domino = 8.5.1.4 No fix listed
ibm lotus domino = 8.5.1.5 No fix listed
ibm lotus domino = 8.5.2 No fix listed
ibm lotus domino = 8.5.2.1 No fix listed

References