Lotus Notes HTML Speed Reader URL buffer overflow

Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...

Lotus Notes HTML Speed Reader URL buffer overflow

Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...

CVE-2005-2618

CVE-2005-2618 is a buffer overflow affecting IBM/Lotus Notes components, notably the Attachment Viewer UUE handling and the HTML Speed Reader, exploited via specially crafted UUE files, long ZIP/TAR file names, or long links in emails. The root cause is inadequate boundary checking in these viewe...

CVE-2005-2619

The CVE-2005-2619 issue affects Lotus Notes (6.5.4 and 7.0) using Autonomy/Verity KeyView SDK kvarcve.dll (pre-9.2.0). The vulnerability arises in the preview generation of archives (ZIP, UUE, TAR) where a filename containing .. can lead to directory traversal and deletion of arbitrary files acce...

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

CVE-2005-2619

Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...

Lotus Notes < 6.5.5 / 7.0.1 Attachment Handling Vulnerabilities

The version of Lotus Notes installed on the remote host reportedly contains five buffer overflow vulnerabilities and one directory traversal vulnerability in the KeyView viewers used to handle message attachments. By sending specially crafted attachments to users of the affected application and...

IBM Lotus Notes ZIP file handling buffer overflow

Overview IBM Lotus Notes contains a buffer overflow when handling a ZIP file with a large file name. This could allow a remote attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Notes is an integrated client application that provides functionality including email,...

Secunia Research: Lotus Notes UUE File Handling Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes UUE File Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows

====================================================================== Secunia Research 10/02/2006 - Lotus Notes HTML Speed Reader Link Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes TAR Reader File Extraction Buffer Overflow - ====================================================================== Table of Contents Affected...

Lotus Notes multiple vulnerabilities

Multiple buffer overflows and directory traversal on handling differnt archives: zip, uue, tar and HTML attachments...

Secunia Research: Lotus Notes Multiple Archive Handling Directory Traversal

====================================================================== Secunia Research 10/02/2006 - Lotus Notes Multiple Archive Handling Directory Traversal - ====================================================================== Table of Contents Affected...

[SA16280] IBM Lotus Notes Multiple Vulnerabilities

TITLE: IBM Lotus Notes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16280 VERIFY ADVISORY: http://secunia.com/advisories/16280/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: IBM Lotus Notes 6.x http://secunia.com/product/388/ IBM Lotus Notes 7.x...

Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes ZIP File Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Lotus Notes < 6.5.5 or 7.0.1 Multiple Vulnerabilities

Binary data 3422.prm...

Buffer overflow

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

Stack overflow

Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service deep recursion leading to stack overflow and crash via long formulas...

Design/Logic Flaw

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2006-0118

Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service deep recursion leading to stack overflow and crash via long formulas...