CVEvulnerability

CVE-2008-1965

9.3 HIGH Published 2008-04-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname.

Affected configurations

• ibm lotus expeditor client 6.1.1 • ibm lotus expeditor client 6.1.2 • ibm lotus symphany

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References