CVE-2011-0915
IBM Lotus Domino < 8.5.3 - Remote Code Execution via Long Content-Type Header in Calendar Meeting Request
Title source: llmDescription
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516245/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/43208
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21461514
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-11-048/
Scores
EPSS
0.1158
EPSS Percentile
95.5%
Details
CWE
CWE-119
Status
published
Products (50)
ibm/lotus_domino
4.6.1
ibm/lotus_domino
4.6.3
ibm/lotus_domino
4.6.4
ibm/lotus_domino
5.0
ibm/lotus_domino
5.0.1
ibm/lotus_domino
5.0.2
ibm/lotus_domino
5.0.3
ibm/lotus_domino
5.0.4
ibm/lotus_domino
5.0.4a
ibm/lotus_domino
5.0.5
... and 40 more
Published
Feb 08, 2011
Tracked Since
Feb 18, 2026