CVE-2007-4222: Buffer Overflow
Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4222?
CVE-2007-4222 has a high severity rating due to its potential for remote code execution.
How do I mitigate CVE-2007-4222?
Mitigation for CVE-2007-4222 can be accomplished by upgrading IBM Lotus Notes to version 7.0.3 or later.
What types of attacks are possible with CVE-2007-4222?
CVE-2007-4222 allows user-assisted remote attackers to execute arbitrary code through specially crafted HTML emails.
Which versions of IBM Lotus Notes are affected by CVE-2007-4222?
CVE-2007-4222 affects IBM Lotus Notes versions prior to 7.0.3.
Can CVE-2007-4222 be exploited without user interaction?
CVE-2007-4222 requires user interaction for exploitation, as it depends on the recipient opening a crafted HTML email.