CVEvulnerability

CVE-2011-0912

9.3 HIGH Published 2011-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.

Affected configurations

• ibm lotus notes 8.0 • ibm lotus notes 8.0.1 • ibm lotus notes 8.0.2 • ibm lotus notes 8.0.2.0 • ibm lotus notes 8.0.2.1 • ibm lotus notes 8.0.2.2 • ibm lotus notes 8.0.2.3 • ibm lotus notes 8.0.2.4 • ibm lotus notes 8.0.2.5 • ibm lotus notes 8.5.0.0 • ibm lotus notes 8.5.0.1 • ibm lotus notes 8.5.1.0 • ibm lotus notes 8.5.1.1 • ibm lotus notes 8.5.1.2 • ibm lotus notes 8.5.1.3 • ibm lotus notes 8.5.1.4

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References