Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1213

high · 9.3

Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.

9.3
CVSS
33.0%
EPSS (exploit prob.)
98th
EPSS percentile
2011-05-31
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
ibmlotus_notes<= 8.5.2.2
ibmlotus_notes3.0
ibmlotus_notes3.0.0.1
ibmlotus_notes3.0.0.2
ibmlotus_notes4.2
ibmlotus_notes4.2.1
ibmlotus_notes4.2.2
ibmlotus_notes4.5
ibmlotus_notes4.6
ibmlotus_notes4.6.7a
ibmlotus_notes4.6.7h
ibmlotus_notes5.0
ibmlotus_notes5.0.1
ibmlotus_notes5.0.1.02
ibmlotus_notes5.0.1a
ibmlotus_notes5.0.1b
ibmlotus_notes5.0.1c
ibmlotus_notes5.0.2
ibmlotus_notes5.0.2a
ibmlotus_notes5.0.2b
ibmlotus_notes5.0.2c
ibmlotus_notes5.0.3
ibmlotus_notes5.0.4
ibmlotus_notes5.0.4a
ibmlotus_notes5.0.5
ibmlotus_notes5.0.5.01
ibmlotus_notes5.0.5.02
ibmlotus_notes5.0.6
ibmlotus_notes5.0.6a
ibmlotus_notes5.0.6a.01
ibmlotus_notes5.0.7
ibmlotus_notes5.0.7a
ibmlotus_notes5.0.8
ibmlotus_notes5.0.9
ibmlotus_notes5.0.9a
ibmlotus_notes5.0.10
ibmlotus_notes5.0.11
ibmlotus_notes5.0.12
ibmlotus_notes5.0a
ibmlotus_notes5.02

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1213