Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-0915

high · 10

Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.

10
CVSS
11.6%
EPSS (exploit prob.)
96th
EPSS percentile
2011-02-08
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
ibmlotus_domino<= 8.5.2.2
ibmlotus_domino4.6.1
ibmlotus_domino4.6.3
ibmlotus_domino4.6.4
ibmlotus_domino5.0
ibmlotus_domino5.0.1
ibmlotus_domino5.0.2
ibmlotus_domino5.0.3
ibmlotus_domino5.0.4
ibmlotus_domino5.0.4a
ibmlotus_domino5.0.5
ibmlotus_domino5.0.6
ibmlotus_domino5.0.6a
ibmlotus_domino5.0.7
ibmlotus_domino5.0.7a
ibmlotus_domino5.0.8
ibmlotus_domino5.0.8a
ibmlotus_domino5.0.9
ibmlotus_domino5.0.9a
ibmlotus_domino5.0.10
ibmlotus_domino5.0.11
ibmlotus_domino6.0
ibmlotus_domino6.0.1
ibmlotus_domino6.0.1.1
ibmlotus_domino6.0.1.2
ibmlotus_domino6.0.1.3
ibmlotus_domino6.0.2
ibmlotus_domino6.0.2.1
ibmlotus_domino6.0.2.2
ibmlotus_domino6.0.2_cf2
ibmlotus_domino6.0.3
ibmlotus_domino6.0.4
ibmlotus_domino6.0.5
ibmlotus_domino6.5
ibmlotus_domino6.5.0
ibmlotus_domino6.5.1
ibmlotus_domino6.5.2
ibmlotus_domino6.5.2.1
ibmlotus_domino6.5.3
ibmlotus_domino6.5.3.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-0915