CVE-2013-3027

IBM Lotus Domino 9.0 - Remote Code Execution via DWA9W ActiveX Control Integer Overflow

Title source: manual

Description

Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a crafted web page, aka SPR PTHN97XHFW.

References (3)

Core 3

Core References

Various Sources x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21644599

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/84381

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21645503

Scores

EPSS 0.0288

EPSS Percentile 85.4%

Details

CWE

CWE-189

Status published

Products (1)

ibm/lotus_domino 9.0.0.0

Published Aug 09, 2013

Tracked Since Feb 18, 2026