CVE-2007-4474: Buffer Overflow
First published: Thu Dec 27 2007(Updated: )
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Domino Web Access | =6.5.4 | |
| IBM Lotus Domino Web Access | =7.0.1 | |
| Ibm Domino Web Access | =6.0.1 | |
| IBM Lotus Domino Web Access | =7.0.34.1 | |
| Ibm Domino Web Access | =7.0 | |
| Ibm Domino Web Access | =6.0.2 | |
| Ibm Domino Web Access | =6.0 | |
| Ibm Domino Web Access | =7.0.1 | |
| Ibm Domino Web Access | =6.0.3 | |
| Ibm Domino Web Access | =6.5.1 | |
| Ibm Domino Web Access | =6.5.5 | |
| Ibm Domino Web Access | =6.5 | |
| Ibm Domino Web Access | =6.0.1.1 | |
| Ibm Domino Web Access | =6.5.2 | |
| Ibm Domino Web Access | =6.0.5 | |
| Ibm Domino Web Access | =6.0.4 | |
| Ibm Domino Web Access | =6.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html
- http://www.kb.cert.org/vuls/id/963889
- http://www.securityfocus.com/bid/26972
- http://secunia.com/advisories/28184
- http://www.securitytracker.com/id?1019138
- http://osvdb.org/40954
- http://www.vupen.com/english/advisories/2007/4296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39175
- https://www.exploit-db.com/exploits/5111
- https://www.exploit-db.com/exploits/4820
- https://www.exploit-db.com/exploits/4818
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm domino web access
- version/ibm domino web access/6.5.4
- canonical/ibm lotus domino web access
- version/ibm lotus domino web access/7.0.1
- version/ibm domino web access/6.0.1
- version/ibm lotus domino web access/7.0.34.1
- version/ibm domino web access/7.0
- version/ibm domino web access/6.0.2
- version/ibm domino web access/6.0
- version/ibm domino web access/7.0.1
- version/ibm domino web access/6.0.3
- version/ibm domino web access/6.5.1
- version/ibm domino web access/6.5.5
- version/ibm domino web access/6.5
- version/ibm domino web access/6.0.1.1
- version/ibm domino web access/6.5.2
- version/ibm domino web access/6.0.5
- version/ibm domino web access/6.0.4
- version/ibm domino web access/6.5.3