Description
The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23201
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33314
Third Party Advisory third-party-advisory
x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=495
Vendor Advisory x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21257029
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1017828
Scores
EPSS
0.0347
EPSS Percentile
87.9%
Details
Status
published
Products (2)
ibm/lotus_sametime
7.5
ibm/lotus_sametime
< 7.0
Published
Mar 31, 2007
Tracked Since
Feb 18, 2026