First published: Thu Dec 16 2010(Updated: )
IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Notes Intellisync | =8.5.0.0 | |
IBM Lotus Notes Intellisync | <=8.5.1.1 | |
IBM Lotus Notes Intellisync | =8.5.0.2 | |
IBM Lotus Notes Intellisync | =8.0.1.3 | |
IBM Lotus Notes Intellisync | =8.0.1 | |
IBM Lotus Notes Intellisync | =8.0.1.2 | |
IBM Lotus Notes Intellisync | =8.0 | |
IBM Lotus Notes Intellisync | =8.5.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-4551 is classified as a denial-of-service vulnerability.
To fix CVE-2010-4551, upgrade IBM Lotus Notes Traveler to version 8.5.1.2 or later.
CVE-2010-4551 affects users of IBM Lotus Notes Traveler versions 8.5.1.1 and earlier, including versions 8.0 and 8.5.0.
The CVE-2010-4551 vulnerability is caused by a NULL pointer dereference when the Internet ID field in a person document is omitted.
The potential impacts of CVE-2010-4551 include application crashes and denial of service when using an Apple device.