CVE-2011-0918 Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID heade...
HighCVSS 10.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | All versions | No fix listed |
References
- 43224 third-party-advisory
- www-01.ibm.com vendor-advisory
- zerodayinitiative.com