CVE-2015-1903

2015-05-2010:59:19

CWE-119

ibm

web.nvd.nist.gov

cve-2015-1903

ibm domino

buffer overflow

remote code execution

bmp image

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.911

Percentile

98.9%

JSON

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y.

Affected configurations

Nvd

Node

ibmdominoMatch8.5.0

ibmdominoMatch8.5.1

ibmdominoMatch8.5.2

ibmdominoMatch8.5.3

ibmdominoMatch9.0.1

VendorProductVersionCPE
ibmdomino8.5.0cpe:2.3:a:ibm:domino:8.5.0:*:*:*:*:*:*:*
ibmdomino8.5.1cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:*
ibmdomino8.5.2cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:*
ibmdomino8.5.3cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:*
ibmdomino9.0.1cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	domino	8.5.0	cpe:2.3:a:ibm:domino:8.5.0:::::::*
ibm	domino	8.5.1	cpe:2.3:a:ibm:domino:8.5.1:::::::*
ibm	domino	8.5.2	cpe:2.3:a:ibm:domino:8.5.2:::::::*
ibm	domino	8.5.3	cpe:2.3:a:ibm:domino:8.5.3:::::::*
ibm	domino	9.0.1	cpe:2.3:a:ibm:domino:9.0.1:::::::*