CVEvulnerability
CVE-2011-1216
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.
Affected configurations
• ibm lotus notes (<= 8.5.2.2)
• ibm lotus notes 3.0
• ibm lotus notes 3.0.0.1
• ibm lotus notes 3.0.0.2
• ibm lotus notes 4.2
• ibm lotus notes 4.2.1
• ibm lotus notes 4.2.2
• ibm lotus notes 4.5
• ibm lotus notes 4.6
• ibm lotus notes 4.6.7a
• ibm lotus notes 4.6.7h
• ibm lotus notes 5.0
• ibm lotus notes 5.0.1
• ibm lotus notes 5.0.1.02
• ibm lotus notes 5.0.1a
• ibm lotus notes 5.0.1b
• ibm lotus notes 5.0.1c
• ibm lotus notes 5.0.2
• ibm lotus notes 5.0.2a
• ibm lotus notes 5.0.2b
• ibm lotus notes 5.0.2c
• ibm lotus notes 5.0.3
• ibm lotus notes 5.0.4
• ibm lotus notes 5.0.4a
• ibm lotus notes 5.0.5
• ibm lotus notes 5.0.5.01
• ibm lotus notes 5.0.5.02
• ibm lotus notes 5.0.6
• ibm lotus notes 5.0.6a
• ibm lotus notes 5.0.6a.01
• ibm lotus notes 5.0.7
• ibm lotus notes 5.0.7a
• ibm lotus notes 5.0.8
• ibm lotus notes 5.0.9
• ibm lotus notes 5.0.9a
• ibm lotus notes 5.0.10
• ibm lotus notes 5.0.11
• ibm lotus notes 5.0.12
• ibm lotus notes 5.0a
• ibm lotus notes 5.02
• ibm lotus notes 6.0
• ibm lotus notes 6.0.1
• ibm lotus notes 6.0.2
• ibm lotus notes 6.0.2.2
• ibm lotus notes 6.0.3
• ibm lotus notes 6.0.4
• ibm lotus notes 6.0.5
• ibm lotus notes 6.5
• ibm lotus notes 6.5.1
• ibm lotus notes 6.5.2
• ibm lotus notes 6.5.3
• ibm lotus notes 6.5.3.1
• ibm lotus notes 6.5.4
• ibm lotus notes 6.5.4.1
• ibm lotus notes 6.5.4.2
• ibm lotus notes 6.5.4.3
• ibm lotus notes 6.5.5
• ibm lotus notes 6.5.5.1
• ibm lotus notes 6.5.5.2
• ibm lotus notes 6.5.5.3
… and 41 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=907 labs.idefense.com
- http://secunia.com/advisories/44624 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21500034 www.ibm.com
- http://www.securityfocus.com/bid/47962 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67623 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13796 oval.cisecurity.org
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=907 labs.idefense.com
- http://secunia.com/advisories/44624 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21500034 www.ibm.com
- http://www.securityfocus.com/bid/47962 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67623 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13796 oval.cisecurity.org