9.3

CVE-2011-1216

Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version <= 8.5.2.2
Ibm ≫ Lotus Notes Version 3.0
Ibm ≫ Lotus Notes Version 3.0.0.1
Ibm ≫ Lotus Notes Version 3.0.0.2
Ibm ≫ Lotus Notes Version 4.2
Ibm ≫ Lotus Notes Version 4.2.1
Ibm ≫ Lotus Notes Version 4.2.2
Ibm ≫ Lotus Notes Version 4.5
Ibm ≫ Lotus Notes Version 4.6
Ibm ≫ Lotus Notes Version 4.6.7a
Ibm ≫ Lotus Notes Version 4.6.7h
Ibm ≫ Lotus Notes Version 5.0
Ibm ≫ Lotus Notes Version 5.0.1
Ibm ≫ Lotus Notes Version 5.0.1.02
Ibm ≫ Lotus Notes Version 5.0.1a
Ibm ≫ Lotus Notes Version 5.0.1b
Ibm ≫ Lotus Notes Version 5.0.1c
Ibm ≫ Lotus Notes Version 5.0.2
Ibm ≫ Lotus Notes Version 5.0.2a
Ibm ≫ Lotus Notes Version 5.0.2b
Ibm ≫ Lotus Notes Version 5.0.2c
Ibm ≫ Lotus Notes Version 5.0.3
Ibm ≫ Lotus Notes Version 5.0.4
Ibm ≫ Lotus Notes Version 5.0.4a
Ibm ≫ Lotus Notes Version 5.0.5
Ibm ≫ Lotus Notes Version 5.0.5.01
Ibm ≫ Lotus Notes Version 5.0.5.02
Ibm ≫ Lotus Notes Version 5.0.6
Ibm ≫ Lotus Notes Version 5.0.6a
Ibm ≫ Lotus Notes Version 5.0.6a.01
Ibm ≫ Lotus Notes Version 5.0.7
Ibm ≫ Lotus Notes Version 5.0.7a
Ibm ≫ Lotus Notes Version 5.0.8
Ibm ≫ Lotus Notes Version 5.0.9
Ibm ≫ Lotus Notes Version 5.0.9a
Ibm ≫ Lotus Notes Version 5.0.10
Ibm ≫ Lotus Notes Version 5.0.11
Ibm ≫ Lotus Notes Version 5.0.12
Ibm ≫ Lotus Notes Version 5.0a
Ibm ≫ Lotus Notes Version 5.02
Ibm ≫ Lotus Notes Version 6.0
Ibm ≫ Lotus Notes Version 6.0.1
Ibm ≫ Lotus Notes Version 6.0.1 Update cf1
Ibm ≫ Lotus Notes Version 6.0.1 Update cf2
Ibm ≫ Lotus Notes Version 6.0.1 Update cf3
Ibm ≫ Lotus Notes Version 6.0.2
Ibm ≫ Lotus Notes Version 6.0.2 Update cf1
Ibm ≫ Lotus Notes Version 6.0.2 Update cf2
Ibm ≫ Lotus Notes Version 6.0.2.2
Ibm ≫ Lotus Notes Version 6.0.3
Ibm ≫ Lotus Notes Version 6.0.4
Ibm ≫ Lotus Notes Version 6.0.5
Ibm ≫ Lotus Notes Version 6.5
Ibm ≫ Lotus Notes Version 6.5.1
Ibm ≫ Lotus Notes Version 6.5.2
Ibm ≫ Lotus Notes Version 6.5.3
Ibm ≫ Lotus Notes Version 6.5.3.1
Ibm ≫ Lotus Notes Version 6.5.4
Ibm ≫ Lotus Notes Version 6.5.4.1
Ibm ≫ Lotus Notes Version 6.5.4.2
Ibm ≫ Lotus Notes Version 6.5.4.3
Ibm ≫ Lotus Notes Version 6.5.5
Ibm ≫ Lotus Notes Version 6.5.5.1
Ibm ≫ Lotus Notes Version 6.5.5.2
Ibm ≫ Lotus Notes Version 6.5.5.3
Ibm ≫ Lotus Notes Version 6.5.6
Ibm ≫ Lotus Notes Version 6.5.6.1
Ibm ≫ Lotus Notes Version 6.5.6.2
Ibm ≫ Lotus Notes Version 6.5.6.3
Ibm ≫ Lotus Notes Version 7.0
Ibm ≫ Lotus Notes Version 7.0.0
Ibm ≫ Lotus Notes Version 7.0.1
Ibm ≫ Lotus Notes Version 7.0.1.1
Ibm ≫ Lotus Notes Version 7.0.2
Ibm ≫ Lotus Notes Version 7.0.2.1
Ibm ≫ Lotus Notes Version 7.0.2.2
Ibm ≫ Lotus Notes Version 7.0.2.3
Ibm ≫ Lotus Notes Version 7.0.3
Ibm ≫ Lotus Notes Version 7.0.3.1
Ibm ≫ Lotus Notes Version 7.0.4
Ibm ≫ Lotus Notes Version 7.0.4.0
Ibm ≫ Lotus Notes Version 7.0.4.1
Ibm ≫ Lotus Notes Version 7.0.4.2
Ibm ≫ Lotus Notes Version 8.0
Ibm ≫ Lotus Notes Version 8.0.0
Ibm ≫ Lotus Notes Version 8.0.1
Ibm ≫ Lotus Notes Version 8.0.2
Ibm ≫ Lotus Notes Version 8.0.2.0
Ibm ≫ Lotus Notes Version 8.0.2.1
Ibm ≫ Lotus Notes Version 8.0.2.2
Ibm ≫ Lotus Notes Version 8.0.2.3
Ibm ≫ Lotus Notes Version 8.0.2.4
Ibm ≫ Lotus Notes Version 8.0.2.5
Ibm ≫ Lotus Notes Version 8.0.2.6
Ibm ≫ Lotus Notes Version 8.5
Ibm ≫ Lotus Notes Version 8.5.0.0
Ibm ≫ Lotus Notes Version 8.5.0.1
Ibm ≫ Lotus Notes Version 8.5.1
Ibm ≫ Lotus Notes Version 8.5.1.0
Ibm ≫ Lotus Notes Version 8.5.1.1
Ibm ≫ Lotus Notes Version 8.5.1.2
Ibm ≫ Lotus Notes Version 8.5.1.3
Ibm ≫ Lotus Notes Version 8.5.1.4
Ibm ≫ Lotus Notes Version 8.5.1.5
Ibm ≫ Lotus Notes Version 8.5.2.0
Ibm ≫ Lotus Notes Version 8.5.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.54% 0.918
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/44624
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21500034
http://www.securityfocus.com/bid/47962
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=907
https://exchange.xforce.ibmcloud.com/vulnerabilities/67623
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13796