CVE-2004-2280: Buffer Overflow
Published Dec 31, 2004
·Updated
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.
Affected Software
10 affected components
IBM Lotus Notes=6.5.2
IBM Lotus Notes=6.0
IBM Lotus Notes=6.0.1
IBM Lotus Notes=6.0.2
IBM Lotus Notes=6.0.4
IBM Lotus Notes=6.5.1
IBM Lotus Notes=6.0.5
IBM Lotus Notes=6.5
IBM Lotus Notes=6.5.3
IBM Lotus Notes=6.0.3
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 19, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2280?
CVE-2004-2280 has a medium severity rating due to its potential to cause denial of service by crashing the application.
2
How do I fix CVE-2004-2280?
To mitigate CVE-2004-2280, upgrade to IBM Lotus Notes version 6.5.3 or 6.0.5 or later.
3
Which versions of IBM Lotus Notes are affected by CVE-2004-2280?
CVE-2004-2280 affects IBM Lotus Notes versions 6.5.1 and earlier, as well as 6.0.4 and earlier.
4
What type of attack does CVE-2004-2280 enable?
CVE-2004-2280 enables remote attackers to execute a denial of service attack by exploiting a buffer overflow.
5
Does CVE-2004-2280 affect client or server installations of IBM Lotus Notes?
CVE-2004-2280 affects client installations of IBM Lotus Notes, particularly those using Java applets.