CVEvulnerability
CVE-2010-0919
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
Affected configurations
• ibm domino web access 6.5
• ibm domino web access 7.0
• ibm domino web access 7.0.1
• ibm domino web access 7.0.2
• ibm domino web access 7.0.3
• ibm domino web access 8.0
• ibm domino web access 8.0.2
• ibm lotus inotes (<= 229.271)
• ibm lotus inotes 229.011
• ibm lotus inotes 229.021
• ibm lotus inotes 229.031
• ibm lotus inotes 229.041
• ibm lotus inotes 229.051
• ibm lotus inotes 229.061
• ibm lotus inotes 229.101
• ibm lotus inotes 229.111
• ibm lotus inotes 229.131
• ibm lotus inotes 229.141
• ibm lotus inotes 229.151
• ibm lotus inotes 229.161
• ibm lotus inotes 229.171
• ibm lotus inotes 229.181
• ibm lotus inotes 229.191
• ibm lotus inotes 229.201
• ibm lotus inotes 229.211
• ibm lotus inotes 229.221
• ibm lotus inotes 229.231
• ibm lotus inotes 229.241
• ibm lotus inotes 229.251
• ibm lotus inotes 229.261
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857 labs.idefense.com
- http://secunia.com/advisories/38681 Vendor Advisory
- http://secunia.com/advisories/38744 Vendor Advisory
- http://secunia.com/advisories/38755 Vendor Advisory
- http://securitytracker.com/id?1023662 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21421808 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27018109 Vendor Advisory
- http://www.osvdb.org/62612 www.osvdb.org
- http://www.securityfocus.com/bid/38457 www.securityfocus.com
- http://www.securityfocus.com/bid/38459 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0495 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0496 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56555 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857 labs.idefense.com
- http://secunia.com/advisories/38681 Vendor Advisory
- http://secunia.com/advisories/38744 Vendor Advisory
- http://secunia.com/advisories/38755 Vendor Advisory
- http://securitytracker.com/id?1023662 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21421808 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27018109 Vendor Advisory
- http://www.osvdb.org/62612 www.osvdb.org
- http://www.securityfocus.com/bid/38457 www.securityfocus.com
- http://www.securityfocus.com/bid/38459 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0495 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0496 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56555 exchange.xforce.ibmcloud.com