Vulnerability Description
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Lotus Domino | <= 8.5.2.2 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/43208
- http://www-01.ibm.com/support/docview.wss?uid=swg21461514Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-11-052/
- http://secunia.com/advisories/43208
- http://www-01.ibm.com/support/docview.wss?uid=swg21461514Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-11-052/
FAQ
What is CVE-2011-0914?
CVE-2011-0914 is a vulnerability with a CVSS score of 10.0 (HIGH). Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading t...
How severe is CVE-2011-0914?
CVE-2011-0914 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0914?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Lotus Domino.