CVE-2010-0919

Description

Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/56555

http://www.vupen.com/english/advisories/2010/0496

http://www.vupen.com/english/advisories/2010/0495

http://www.securityfocus.com/bid/38459

http://www.securityfocus.com/bid/38457

http://www.osvdb.org/62612

http://www-01.ibm.com/support/docview.wss?uid=swg27018109

http://www-01.ibm.com/support/docview.wss?uid=swg21421808

http://securitytracker.com/id?1023662

http://secunia.com/advisories/38755

http://secunia.com/advisories/38744

http://secunia.com/advisories/38681

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS