Vulnerability Description
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Domino Web Access | 6.5 |
| Ibm | Lotus Inotes | <= 229.271 |
| Ibm | Lotus Domino | 8.0.2.4 |
Related Weaknesses (CWE)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
- http://secunia.com/advisories/38681Vendor Advisory
- http://secunia.com/advisories/38744Vendor Advisory
- http://secunia.com/advisories/38755Vendor Advisory
- http://securitytracker.com/id?1023662
- http://www-01.ibm.com/support/docview.wss?uid=swg21421808Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27018109Vendor Advisory
- http://www.osvdb.org/62612
- http://www.securityfocus.com/bid/38457
- http://www.securityfocus.com/bid/38459
- http://www.vupen.com/english/advisories/2010/0495Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0496PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56555
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
- http://secunia.com/advisories/38681Vendor Advisory
FAQ
What is CVE-2010-0919?
CVE-2010-0919 is a vulnerability with a CVSS score of 7.6 (HIGH). Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4...
How severe is CVE-2010-0919?
CVE-2010-0919 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-0919?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Domino Web Access, Ibm Lotus Inotes, Ibm Lotus Domino.