CVE-2007-6706: Code Injection
Published Mar 9, 2008
·Updated
Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.
Affected Software
3 affected components
IBM Lotus Notes<=7.0.2
IBM Lotus Notes=6.5
IBM Lotus Notes=8.0
Event History
Mar 9, 2008
CVE Published
02:44 AM
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6706?
CVE-2007-6706 is considered to be a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-6706?
To fix CVE-2007-6706, upgrade IBM Lotus Notes to version 7.0.3 or later.
3
What versions of IBM Lotus Notes are affected by CVE-2007-6706?
CVE-2007-6706 affects IBM Lotus Notes versions 6.5, 7.0.x before 7.0.2 CCH, and 7.0.3, as well as possibly 8.0.
4
Can CVE-2007-6706 be exploited through email?
Yes, CVE-2007-6706 can be exploited by sending specially crafted emails via SMTP.
5
What are the potential consequences of CVE-2007-6706?
The potential consequences of exploiting CVE-2007-6706 include unauthorized remote code execution on the affected system.