759 matches found
Lotus Notes iNotes Attachment_Times ActiveX Overflow
Added: 08/22/2012 CVE: CVE-2012-2175 BID: 53879 OSVDB: 82755 Background Lotus Notes is the client for Lotus Domino servers. iNotes is a web-based alternative to the Notes client. Problem The iNotes ActiveX control does not properly validate the user-supplied values for the attachmenttimes...
IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within notes.exe. When...
IBM Lotus Notes < 8.5.3 FP2 URL Handler Unspecified Remote Code Execution
The remote host has a version of Lotus Notes prior to 8.5.3 Fix Pack 2 installed. It is, therefore, reportedly affected by a remote code execution vulnerability that an attacker can exploit by tricking a victim into clicking a specially crafted 'notes://' URL. Note that this vulnerability can onl...
IBM Lotus Notes 8.x "notes" URI处理器漏洞
CVE ID: CVE-2012-2174 IBM Lotus Notes是桌面客户端，为用户提供了单点访问功能，有助于他们创建、查询和共享知识，与团队协作，以及采取相应措施。 IBM Lotus Notes 8.0.2、8.5、8.5.1、8.5.2、8.5.3在"notes" URI处理程序中存在错误，可被利用执行任意命令。 0 IBM Lotus Notes 8.x 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（1598348）以及相应补丁: 1598348：Security Bulletin: IBM Lotus Notes URL Command Injecti...
CVE-2012-2174
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL...
Code injection
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL...
DSquare Exploit Pack: D2SEC_NOTESURL
Name| d2secnotesurl ---|--- CVE| CVE-2012-2174 Exploit Pack| D2ExploitPack Description| IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability Notes|...
CVE-2012-2174
CVE-2012-2174 affects IBM Lotus Notes 8.x, where the URL handler for notes:// URLs is vulnerable to remote code execution. The vulnerability exists in the Lotus Notes URL handler prior to 8.5.3 FP2, allowing an attacker to execute arbitrary commands by convincing a user to open a crafted notes://...
CVE-2012-2174
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL...
CVE-2012-2174: Improper Control of Generation of Code
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL...
IBM Lotus Notes Client URL Handler Command Injection
This module exploits a command injection vulnerability in the URL handler for for the IBM Lotus Notes Client use exploit/windows/browser/notes/handlercmdinject msf undefinedhandlercmdinject show actions ...actions... msf undefinedhandlercmdinject set ACTION msf undefinedhandlercmdinject show...
IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (CVE-2011-1213)
A code execution vulnerability has been reported in IBM Lotus Notes. The vulnerability is due to an error while parsing the headers of LZH files. A remote attacker may exploit this vulnerability by enticing a target user to open an email containing a specially crafted LZH file. Successful...
Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)
The file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by multiple buffer overflow vulnerabilities that can be triggered when handling attachments of various types. By sending an email with a specially...
IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow
Added: 06/30/2011 CVE: CVE-2011-1213 BID: 48018 OSVDB: 72706 Background Lotus Notes is the client for Lotus Domino servers. Problem IBM Lotus Notes File Viewer is vulnerable to remote code execution as a result of a stack buffer overflow while parsing headers of LZH files. A remote, unauthenticat...
IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow
Added: 06/30/2011 CVE: CVE-2011-1213 BID: 48018 OSVDB: 72706 Background Lotus Notes is the client for Lotus Domino servers. Problem IBM Lotus Notes File Viewer is vulnerable to remote code execution as a result of a stack buffer overflow while parsing headers of LZH files. A remote, unauthenticat...
IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow
Added: 06/30/2011 CVE: CVE-2011-1213 BID: 48018 OSVDB: 72706 Background Lotus Notes is the client for Lotus Domino servers. Problem IBM Lotus Notes File Viewer is vulnerable to remote code execution as a result of a stack buffer overflow while parsing headers of LZH files. A remote, unauthenticat...
IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow
Added: 06/30/2011 CVE: CVE-2011-1213 BID: 48018 OSVDB: 72706 Background Lotus Notes is the client for Lotus Domino servers. Problem IBM Lotus Notes File Viewer is vulnerable to remote code execution as a result of a stack buffer overflow while parsing headers of LZH files. A remote, unauthenticat...
Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh attachment)
No description provided by source. $Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview
$Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh attachment)
Exploit for windows platform in category remote exploits $Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...