CVE-2008-2163

IBM Lotus Quickr 8.1 is affected by CVE-2008-2163: an XSS vulnerability in the WYSIWYG editors that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The issue affects Quickr 8.1 before Hotfix 5 on Windows and AIX, and before Hotfix 3 on i5/OS. Remediation is to ...

Lotus Expeditor code execution

cai: URI handler allows code exectuion from any SMB share...

Lotus expeditor rcplauncher uri handler vulnerability

Hello Lotus expeditor rcplauncher registers a cai: uri handler. This handler executes "D:Program FilesIBMLotusSymphonyframeworkrcprcplauncher.exe" -config notes -com.ibm.rcp.portal.app.uiopenCA "1" the rcplauncher process accepts various arguments which can be abused to execute arbitrary code. Th...

CVE-2008-1965

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrat...

Design/Logic Flaw

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrat...

CVE-2008-1965

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrat...

CVE-2008-1965

IBM Lotus Expeditor's cai: URI handler in rcplauncher (used by Lotus Expeditor Client for Desktop 6.1.1/6.1.2 and Lotus Symphony) is vulnerable: a crafted cai: URI can inject -launcher to rcplauncher.exe, enabling remote code execution with the user's privileges. The attack relies on loading a sp...

IBM Lotus Expeditor 6.1 - URI Handler Command Execution

IBM Lotus Expeditor 6.1 - URI Handler Command Execution source: https://www.securityfocus.com/bid/28926/info IBM Lotus Expeditor is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitra...

lotus-exec.txt

Hello, I have found that the lotus expeditor rcplauncher as installed by lotus symphony and possibly other products, registers a cai: uri handler. This handler executes "D:\Program Files\IBM\Lotus\Symphony\framework\rcp\rcplauncher.exe" -config notes -com.ibm.rcp.portal.app.uiopenCA "%1" the...

IBM Lotus Expeditor 6.1 - URI Handler Command Execution

source: https://www.securityfocus.com/bid/28926/info IBM Lotus Expeditor is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow maliciou...

IBM Lotus Notes / Autonomy Keyview multiple security vulnerabilities

Multiple buffer overflows...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

ActivePDF / Lotus Notes / Symantec Mail Security / Autonomy Keyview multiple security vulnerabilities

Multiple buffer overflows on Folio Flat File / Applix graphics format parsing...

Secunia Research: Lotus Notes htmsr.dll Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes htmsr.dll Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow

====================================================================== Secunia Research 08/04/2008 - Lotus Notes kvdocve.dll Path Processing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Buffer overflow

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

Buffer overflow

Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with 1 "large chunks of data," or a long URL in the 2 BACKGROUND attribute of a BO...

CVE-2008-1718

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

Buffer overflow

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...