CVE-2011-3575
Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
- Score
- CVSS 2.0 9.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2011-09-19
- Last modified
- 2024-08-06
- Weaknesses
- CWE-119
Affected products
References
- http://www.research.reversingcode.com/exploits/IBMLotusDomino_StackOverflowPoC
- http://www.research.reversingcode.com/index.php/advisories/73-ibm-ssd-1012211
- http://www.securityfocus.com/bid/49705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69802
