CVE-2018-1435 IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in co...
HighCVSS 7.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm notes | = 8.5 | No fix listed |
| ibm notes | = 8.5.0.2 | No fix listed |
| ibm notes | = 8.5.1 | No fix listed |
| ibm notes | = 8.5.1.5 | No fix listed |
| ibm notes | = 8.5.2 | No fix listed |
| ibm notes | = 8.5.2.4 | No fix listed |
| ibm notes | = 8.5.3 | No fix listed |
| ibm notes | = 8.5.3.6 | No fix listed |
| ibm notes | = 9.0 | No fix listed |
| ibm notes | = 9.0.1 | No fix listed |
| ibm notes | = 9.0.1.9 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 103404 third-party-advisory vdb-entry
- 1040563 third-party-advisory vdb-entry
- ibm-notes-cve20181435-code-exec(139563) vdb-entry vendor-advisory