Design/Logic Flaw

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (CVE-2009-3114) affects Lotus Notes 8.0/8.5 RSS reader widget. The flaw causes local HTML documents to be saved from RSS items, enabling remote attackers to execute arbitrary script in Internet Explorer’s Local Machine Zone via a craf...

IBM Lotus Notes 8.5 RSS Widget crossite scripting

Scripting in local host zone is possible...

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation scip AG Vulnerability ID 4021 09/08/2009 http://www.scip.ch/?vuldb.4021 I. INTRODUCTION Lotus Notes is a client-server, collaborative application developed and sold by IBM Software Group. More information is available on the official product web...

Buffer overflow

Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer aka File Viewer for Excel, as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention DLP, and other products, allows remote attackers to execute arbitrary code...

Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3037

CVE-2009-3037 is a buffer overflow in the Autonomy KeyView XLS viewer (xlssr.dll) used by IBM Lotus Notes and multiple Symantec products (Mail Security, BrightMail, DLP, etc.). The overflow occurs while parsing Excel .xls attachments, enabling remote code execution by enticing a user to open a ma...

iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability

iDefense Security Advisory 08.25.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 25, 2009 I. BACKGROUND Autonomy KeyView SDK is a commercial SDK that provides many file format parsing libraries. It supports a large number of different document formats, one of which is the Microsoft...

Lotus note connector for Blackberry Manager 5.0.0.11 ActiveX DoS Vuln

No description provided by source. Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis...

Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service

source: https://www.securityfocus.com/bid/36144/info The Nokia Lotus Notes Connector 'lnresobject.dll' ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error. A successful attack allows a remote attacker to crash an application that is using the Activ...

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation...

Nokia Lotus Notes Connector - lnresobject.dll Remote Denial of Service

Nokia Lotus Notes Connector - lnresobject.dll Remote Denial of Service source: https://www.securityfocus.com/bid/36144/info The Nokia Lotus Notes Connector 'lnresobject.dll' ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error. A successful attack...

Autonomy KeyView Module Excel Document Processing Buffer Overflow Vulnerability

Description Autonomy KeyView module is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers. Exploiting this issue will allow an attacker to corrupt memory and cause denial-of-service...

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service

Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1...

Autonomy KeyView SDK buffer overflow vulnerability

Overview Autonomy KeyView SDK contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description Autonomy KeyView SDK is a commercial software development kit SDK that includes file filtering libraries. A vulnerability exists in the way the SDK libraries...

Autonomy KeyView模块Word Perfect文件解析栈溢出漏洞

BUGTRAQ ID: 34086 CVECAN ID: CVE-2008-4564 KeyView是用于导出、转换和查看各种格式文件的软件包。 KeyView模块的wp6sr.dll库在处理Word Perfect文档时未经边界检查便将某些记录和数据拷贝到了固定大小的栈缓冲区中，如果用户受骗打开了恶意文档的话就可以触发栈溢出，导致执行任意代码。 IBM Lotus Notes 8.0 IBM Lotus Notes 7.0 IBM Lotus Notes 6.5 Symantec Mail Security 7.5.x Symantec Mail Security 6.0.x...

Stack overflow

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security SMS products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention DLP products, allows remote attackers to execute arbitrary code via a...