CVE-2011-0915: Buffer Overflow
Published Feb 8, 2011
·Updated
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
Affected Software
74 affected components
IBM Lotus Domino=8.0.2.4
IBM Lotus Domino=7.0.2.2
IBM Lotus Domino=6.0.5
IBM Lotus Domino=5.0.4
IBM Lotus Domino=5.0.2
IBM Lotus Domino=7.0.4
IBM Lotus Domino=6.5.2
IBM Lotus Domino=6.5.4.1
IBM Lotus Domino=8.5.1.1
IBM Lotus Domino=6.0
IBM Lotus Domino=8.5.1.4
IBM Lotus Domino=8.0.2
IBM Lotus Domino=7.0.4.2
IBM Lotus Domino=7.0.1.1
IBM Lotus Domino=4.6.4
IBM Lotus Domino=6.0.4
IBM Lotus Domino=6.0.2
IBM Lotus Domino=5.0.1
IBM Lotus Domino=5.0.8a
IBM Lotus Domino=5.0.3
IBM Lotus Domino=6.5.4
IBM Lotus Domino=7.0.2.1
IBM Lotus Domino=6.0.2_cf2
IBM Lotus Domino=5.0.9
IBM Lotus Domino=6.0.2.2
IBM Lotus Domino=8.0.2.3
IBM Lotus Domino=8.5.2.1
IBM Lotus Domino=6.0.1.1
IBM Lotus Domino=7.0.2.3
IBM Lotus Domino=7.0.4.1
IBM Lotus Domino<=8.5.2.2
IBM Lotus Domino=6.5
IBM Lotus Domino=6.5.2.1
IBM Lotus Domino=8.5.1
IBM Lotus Domino=6.5.4.3
IBM Lotus Domino=4.6.1
IBM Lotus Domino=5.0.4a
IBM Lotus Domino=6.5.3.1
IBM Lotus Domino=7.0.3
IBM Lotus Domino=6.5.1
IBM Lotus Domino=6.0.1.2
IBM Lotus Domino=5.0.11
IBM Lotus Domino=5.0.7
IBM Lotus Domino=7.0
IBM Lotus Domino=8.0.2.1
IBM Lotus Domino=8.0.2.6
IBM Lotus Domino=8.5.1.2
IBM Lotus Domino=6.5.0
IBM Lotus Domino=6.5.6
IBM Lotus Domino=6.0.2.1
IBM Lotus Domino=5.0.6
IBM Lotus Domino=5.0.6a
IBM Lotus Domino=5.0
IBM Lotus Domino=4.6.3
IBM Lotus Domino=6.0.1
IBM Lotus Domino=6.5.4.2
IBM Lotus Domino=6.5.3
IBM Lotus Domino=8.0.2.5
IBM Lotus Domino=6.0.3
IBM Lotus Domino=6.0.1.3
IBM Lotus Domino=8.5.2
IBM Lotus Domino=8.0.2.2
IBM Lotus Domino=7.0.2
IBM Lotus Domino=6.5.5
IBM Lotus Domino=5.0.9a
IBM Lotus Domino=5.0.5
IBM Lotus Domino=8.5.1.5
IBM Lotus Domino=7.0.1
IBM Lotus Domino=5.0.8
IBM Lotus Domino=7.0.3.1
IBM Lotus Domino=8.0.1
IBM Lotus Domino=5.0.7a
IBM Lotus Domino=5.0.10
IBM Lotus Domino=8.5.1.3
Event History
Feb 8, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0915?
CVE-2011-0915 has a critical severity rating, allowing for remote code execution on affected systems.
2
How do I fix CVE-2011-0915?
To fix CVE-2011-0915, upgrade to IBM Lotus Domino version 8.5.3 or later.
3
Which versions of IBM Lotus Domino are affected by CVE-2011-0915?
CVE-2011-0915 affects multiple versions of IBM Lotus Domino, including versions 4.6.1 up to 8.5.2.2.
4
What type of vulnerability is CVE-2011-0915?
CVE-2011-0915 is a stack-based buffer overflow vulnerability.
5
Can CVE-2011-0915 be exploited remotely?
Yes, CVE-2011-0915 can be exploited remotely via a malicious iCalendar meeting request.