CVE-2007-4474

CVE-2007-4474 involves multiple stack-based buffer overflows in IBM Lotus Domino Web Access ActiveX controls (inotes6.dll, inotes6w.dll, dwa7.dll, dwa7w.dll) used by Domino 6.x/7.x. The root cause is a boundary/overflow vulnerability when handling a long General_ServerName property value in the U...

CVE-2007-4474

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long GeneralServerName propert...

IBM Lotus Domino Web Access ActiveX Control Buffer Overflow Vulnerabilities

The remote host contains the Domino Web Access or iNotes6 Class ActiveX control, which is used by IBM Lotus Domino for uploading files and clearing the cache on logout. The version of this control on the remote host reportedly contains multiple stack-based buffer overflows. If a remote attacker c...

IBM Lotus Domino Web Access ActiveX control stack buffer overflows

Overview The IBM Lotus Domino Web Access ActiveX control contains multiple stack buffer overflow vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Domino includes an ActiveX control called Domino Web Access,...

CVE-2007-6295

Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2007-6295

Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2007-6295

The documents confirm CVE-2007-6295 is an XSS vulnerability in IBM Lotus Sametime prior to version 8.0, affecting the WebRunMenuFrame page of the online meeting center template. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI, with attack vector over n...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

IBM Lotus Notes buffer overflow

Buffer overflow on Lotus WorkSheet files processing...

CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisor...

IBM Lotus Notes Lotus 1-2-3文件查看器缓冲区溢出漏洞

Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 Lotus Notes的邮件客户端支持预览和处理各种格式的文件附件。为了预览和处理Lotus 1-2-3所使用的Lotus工作表文件格式（WKS）的文件，邮件客户端使用了第三方软件厂商的函数库（Autonomy的Verity KeyView SDK）。该函数库处理Lotus 1-2-3文件附件时存在缓冲区溢出漏洞，如果用户试图查看恶意附件的话就可以触发这个溢出，导致执行任意指令。 尽管这只是第三方组件中的问题，但Lotus...

Autonomy KeyView Lotus 1-2-3 File Multiple Buffer Overflow Vulnerabilities

Description Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the context of the user running the application. Multiple applications incorporate the vulnerable KeyView component, so they...

Lotus Notes buffer overflow in the Lotus WorkSheet file processor

Advisory ID Internal CORE-2007-0821 Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory ID: CORE-2007-0821 Date published: 2007-11-27 Date of last update: 2007-11-27 Vendors contacted: IBM Corp. Release mode: COORDINATED RELEASE Vulnerability...

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26604/info Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the...

Lotus Notes TagAttributeListCopy buffer overflow

Added: 11/21/2007 CVE: CVE-2007-4222 BID: 26200 OSVDB: 40949 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the TagAttributeListCopy function in nnotes.dll could allow command execution when a user receives a specially crafted e-mail message and forwar...

Lotus Notes TagAttributeListCopy buffer overflow

Added: 11/21/2007 CVE: CVE-2007-4222 BID: 26200 OSVDB: 40949 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the TagAttributeListCopy function in nnotes.dll could allow command execution when a user receives a specially crafted e-mail message and forwar...