CVE-2009-3114: Code Injection
Published Sep 9, 2009
·Updated
The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K.
Affected Software
1 affected component
IBM Lotus Notes=8.5
Event History
Sep 9, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3114?
CVE-2009-3114 is categorized as a medium vulnerability due to its potential to execute arbitrary scripts.
2
How do I fix CVE-2009-3114?
To fix CVE-2009-3114, upgrade to a patched version of IBM Lotus Notes that addresses this vulnerability.
3
What versions of IBM Lotus Notes are affected by CVE-2009-3114?
CVE-2009-3114 affects IBM Lotus Notes versions 8.0 and 8.5.
4
What type of attack is associated with CVE-2009-3114?
CVE-2009-3114 is associated with remote attacks that exploit crafted RSS feeds to execute scripts.
5
Can CVE-2009-3114 impact Internet Explorer?
Yes, CVE-2009-3114 can allow arbitrary script execution in Internet Explorer's Local Machine Zone.