CVE-2007-6706

high

Description

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.

References

http://www.vupen.com/english/advisories/2007/3597

http://www-1.ibm.com/support/docview.wss?uid=swg21271957

http://securitytracker.com/id?1019464

http://secunia.com/advisories/27279

http://osvdb.org/40956

Details

Source: Mitre, NVD

Published: 2008-03-09

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.03913