CVE-2012-2175
IBM Lotus iNotes 8.5.x - Buffer Overflow in Attachment_Times Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-2175.
PoCs published by Metasploit, Gaurav Baruah, juan vazquez, including Metasploit module exploits/windows/browser/inotes_dwa85w_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in IBM Lotus iNotes ActiveX control (dwa85W.dll) via the 'Attachment_Times' property, achieving remote code execution on vulnerable systems. It uses heap spraying and ROP chains to bypass ASLR and DEP.
Description
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
Exploits (2)
This Metasploit module exploits a buffer overflow in IBM Lotus iNotes ActiveX control (dwa85W.dll) via the 'Attachment_Times' property, achieving remote code execution on vulnerable systems. It uses heap spraying and ROP chains to bypass ASLR and DEP.
This Metasploit module exploits a buffer overflow vulnerability in the IBM Lotus iNotes dwa85W ActiveX control via the 'Attachment_Times' property, leveraging heap spraying and ROP chains for reliable exploitation across multiple IE versions and Windows platforms.