CVEvulnerability
CVE-2007-6706
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.
Affected configurations
• ibm lotus notes (<= 7.0.2)
• ibm lotus notes 6.5
• ibm lotus notes 8.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/40956 osvdb.org
- http://secunia.com/advisories/27279 Vendor Advisory
- http://securitytracker.com/id?1019464 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21271957 www-1.ibm.com
- http://www.vupen.com/english/advisories/2007/3597 www.vupen.com
- http://osvdb.org/40956 osvdb.org
- http://secunia.com/advisories/27279 Vendor Advisory
- http://securitytracker.com/id?1019464 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21271957 www-1.ibm.com
- http://www.vupen.com/english/advisories/2007/3597 www.vupen.com