CVEvulnerability
CVE-2007-1784
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.
Affected configurations
• ibm lotus sametime (<= 7.0)
• ibm lotus sametime 7.5
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=495 labs.idefense.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21257029 Vendor Advisory
- http://www.securityfocus.com/bid/23201 www.securityfocus.com
- http://www.securitytracker.com/id?1017828 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33314 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=495 labs.idefense.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21257029 Vendor Advisory
- http://www.securityfocus.com/bid/23201 www.securityfocus.com
- http://www.securitytracker.com/id?1017828 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33314 exchange.xforce.ibmcloud.com