CVE-2011-1216 Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadshee...
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus notes | <= 8.5.2.2 | No fix listed |
| ibm lotus notes | = 3.0 | No fix listed |
| ibm lotus notes | = 3.0.0.1 | No fix listed |
| ibm lotus notes | = 3.0.0.2 | No fix listed |
| ibm lotus notes | = 4.2 | No fix listed |
| ibm lotus notes | = 4.2.1 | No fix listed |
| ibm lotus notes | = 4.2.2 | No fix listed |
| ibm lotus notes | = 4.5 | No fix listed |
| ibm lotus notes | = 4.6 | No fix listed |
| ibm lotus notes | = 4.6.7a | No fix listed |
| ibm lotus notes | = 4.6.7h | No fix listed |
| ibm lotus notes | = 5.0 | No fix listed |
| ibm lotus notes | = 5.0.1 | No fix listed |
| ibm lotus notes | = 5.0.1.02 | No fix listed |
| ibm lotus notes | = 5.0.1a | No fix listed |
| ibm lotus notes | = 5.0.1b | No fix listed |
| ibm lotus notes | = 5.0.1c | No fix listed |
| ibm lotus notes | = 5.0.2 | No fix listed |
| ibm lotus notes | = 5.0.2a | No fix listed |
| ibm lotus notes | = 5.0.2b | No fix listed |
| ibm lotus notes | = 5.0.2c | No fix listed |
| ibm lotus notes | = 5.0.3 | No fix listed |
| ibm lotus notes | = 5.0.4 | No fix listed |
| ibm lotus notes | = 5.0.4a | No fix listed |
| ibm lotus notes | = 5.0.5 | No fix listed |
Show 81 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus notes | = 5.0.5.01 | No fix listed |
| ibm lotus notes | = 5.0.5.02 | No fix listed |
| ibm lotus notes | = 5.0.6 | No fix listed |
| ibm lotus notes | = 5.0.6a | No fix listed |
| ibm lotus notes | = 5.0.6a.01 | No fix listed |
| ibm lotus notes | = 5.0.7 | No fix listed |
| ibm lotus notes | = 5.0.7a | No fix listed |
| ibm lotus notes | = 5.0.8 | No fix listed |
| ibm lotus notes | = 5.0.9 | No fix listed |
| ibm lotus notes | = 5.0.9a | No fix listed |
| ibm lotus notes | = 5.0.10 | No fix listed |
| ibm lotus notes | = 5.0.11 | No fix listed |
| ibm lotus notes | = 5.0.12 | No fix listed |
| ibm lotus notes | = 5.0a | No fix listed |
| ibm lotus notes | = 5.02 | No fix listed |
| ibm lotus notes | = 6.0 | No fix listed |
| ibm lotus notes | = 6.0.1 | No fix listed |
| ibm lotus notes | = 6.0.1-cf1 | No fix listed |
| ibm lotus notes | = 6.0.1-cf2 | No fix listed |
| ibm lotus notes | = 6.0.1-cf3 | No fix listed |
| ibm lotus notes | = 6.0.2 | No fix listed |
| ibm lotus notes | = 6.0.2-cf1 | No fix listed |
| ibm lotus notes | = 6.0.2-cf2 | No fix listed |
| ibm lotus notes | = 6.0.2.2 | No fix listed |
| ibm lotus notes | = 6.0.3 | No fix listed |
| ibm lotus notes | = 6.0.4 | No fix listed |
| ibm lotus notes | = 6.0.5 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
| ibm lotus notes | = 6.5.1 | No fix listed |
| ibm lotus notes | = 6.5.2 | No fix listed |
| ibm lotus notes | = 6.5.3 | No fix listed |
| ibm lotus notes | = 6.5.3.1 | No fix listed |
| ibm lotus notes | = 6.5.4 | No fix listed |
| ibm lotus notes | = 6.5.4.1 | No fix listed |
| ibm lotus notes | = 6.5.4.2 | No fix listed |
| ibm lotus notes | = 6.5.4.3 | No fix listed |
| ibm lotus notes | = 6.5.5 | No fix listed |
| ibm lotus notes | = 6.5.5.1 | No fix listed |
| ibm lotus notes | = 6.5.5.2 | No fix listed |
| ibm lotus notes | = 6.5.5.3 | No fix listed |
| ibm lotus notes | = 6.5.6 | No fix listed |
| ibm lotus notes | = 6.5.6.1 | No fix listed |
| ibm lotus notes | = 6.5.6.2 | No fix listed |
| ibm lotus notes | = 6.5.6.3 | No fix listed |
| ibm lotus notes | = 7.0 | No fix listed |
| ibm lotus notes | = 7.0.0 | No fix listed |
| ibm lotus notes | = 7.0.1 | No fix listed |
| ibm lotus notes | = 7.0.1.1 | No fix listed |
| ibm lotus notes | = 7.0.2 | No fix listed |
| ibm lotus notes | = 7.0.2.1 | No fix listed |
| ibm lotus notes | = 7.0.2.2 | No fix listed |
| ibm lotus notes | = 7.0.2.3 | No fix listed |
| ibm lotus notes | = 7.0.3 | No fix listed |
| ibm lotus notes | = 7.0.3.1 | No fix listed |
| ibm lotus notes | = 7.0.4 | No fix listed |
| ibm lotus notes | = 7.0.4.0 | No fix listed |
| ibm lotus notes | = 7.0.4.1 | No fix listed |
| ibm lotus notes | = 7.0.4.2 | No fix listed |
| ibm lotus notes | = 8.0 | No fix listed |
| ibm lotus notes | = 8.0.0 | No fix listed |
| ibm lotus notes | = 8.0.1 | No fix listed |
| ibm lotus notes | = 8.0.2 | No fix listed |
| ibm lotus notes | = 8.0.2.0 | No fix listed |
| ibm lotus notes | = 8.0.2.1 | No fix listed |
| ibm lotus notes | = 8.0.2.2 | No fix listed |
| ibm lotus notes | = 8.0.2.3 | No fix listed |
| ibm lotus notes | = 8.0.2.4 | No fix listed |
| ibm lotus notes | = 8.0.2.5 | No fix listed |
| ibm lotus notes | = 8.0.2.6 | No fix listed |
| ibm lotus notes | = 8.5 | No fix listed |
| ibm lotus notes | = 8.5.0.0 | No fix listed |
| ibm lotus notes | = 8.5.0.1 | No fix listed |
| ibm lotus notes | = 8.5.1 | No fix listed |
| ibm lotus notes | = 8.5.1.0 | No fix listed |
| ibm lotus notes | = 8.5.1.1 | No fix listed |
| ibm lotus notes | = 8.5.1.2 | No fix listed |
| ibm lotus notes | = 8.5.1.3 | No fix listed |
| ibm lotus notes | = 8.5.1.4 | No fix listed |
| ibm lotus notes | = 8.5.1.5 | No fix listed |
| ibm lotus notes | = 8.5.2.0 | No fix listed |
| ibm lotus notes | = 8.5.2.1 | No fix listed |
References
- 20110524 IBM Lotus Notes Applix Attachment Viewer Stack Buffer Overflow third-party-advisory
- 44624 third-party-advisory vendor-advisory
- www.ibm.com
- 47962 vdb-entry
- lotus-notes-assr-bo(67623) vdb-entry
- oval:org.mitre.oval:def:13796 signature vdb-entry