CVE-2011-1213
IBM Lotus Notes < 8.5.2.2 - Remote Code Execution via Crafted LZH Attachment
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-1213.
PoCs published by Metasploit, binaryhouse.net, including Metasploit module exploits/windows/lotus/lotusnotes_lzh.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Lotus Notes 8.0.x to 8.5.2 FP2 via a malformed LZH attachment. It includes SEH and ROP-based payload delivery for both non-DEP and DEP-enabled targets.
Description
Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Lotus Notes 8.0.x to 8.5.2 FP2 via a malformed LZH attachment. It includes SEH and ROP-based payload delivery for both non-DEP and DEP-enabled targets.
This Metasploit module exploits a stack buffer overflow in Lotus Notes 8.0.x to 8.5.2 FP2 via a malformed LZH file attachment. It includes SEH and ROP-based exploitation techniques to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Lotus Notes 8.0.x to 8.5.2 FP2 via a malformed LZH file. It includes SEH and ROP-based payload delivery for both non-DEP and DEP-enabled targets.