Lucene search

K
cve[email protected]CVE-2007-4222
HistoryOct 29, 2007 - 10:46 p.m.

CVE-2007-4222

2007-10-2922:46:00
CWE-119
web.nvd.nist.gov
20
ibm
lotus notes
cve-2007-4222
buffer overflow
nnotes.dll
security vulnerability
remote code execution
html email
nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.818 High

EPSS

Percentile

98.3%

Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.

CPENameOperatorVersion
ibm:lotus_notesibm lotus notesle7.0.2

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.818 High

EPSS

Percentile

98.3%