Lucene search

K
cveIbmCVE-2015-4994
HistoryOct 29, 2015 - 10:59 a.m.

CVE-2015-4994

2015-10-2910:59:43
CWE-119
ibm
web.nvd.nist.gov
29
cve-2015-4994
buffer overflow
ibm domino
remote code execution
denial of service
smtp daemon
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.182

Percentile

96.2%

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than CVE-2015-5040.

Affected configurations

Nvd
Node
ibmdominoMatch8.5.0
OR
ibmdominoMatch8.5.1
OR
ibmdominoMatch8.5.2
OR
ibmdominoMatch8.5.3
OR
ibmdominoMatch9.0.1
VendorProductVersionCPE
ibmdomino8.5.0cpe:2.3:a:ibm:domino:8.5.0:*:*:*:*:*:*:*
ibmdomino8.5.1cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:*
ibmdomino8.5.2cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:*
ibmdomino8.5.3cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:*
ibmdomino9.0.1cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.182

Percentile

96.2%