CVE-2011-1215: Buffer Overflow
Published May 31, 2011
·Updated
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
Affected Software
37 affected components
IBM Lotus Notes=8.5.2.1
IBM Lotus Notes=8.0.2.6
IBM Lotus Notes=7.0.1.1
IBM Lotus Notes=8.5.0.1
IBM Lotus Notes=8.5
IBM Lotus Notes=8.0.2.0
IBM Lotus Notes=8.5.1.3
IBM Lotus Notes=8.0.2.5
IBM Lotus Notes=8.5.1
IBM Lotus Notes=8.5.1.2
IBM Lotus Notes=7.0.2.2
IBM Lotus Notes=8.5.1.4
IBM Lotus Notes=7.0.2.3
IBM Lotus Notes=8.0.2.1
IBM Lotus Notes=7.0.0
IBM Lotus Notes=8.0.1
IBM Lotus Notes=7.0.2.1
IBM Lotus Notes=7.0
IBM Lotus Notes=8.0.2.3
IBM Lotus Notes=7.0.4
IBM Lotus Notes=8.5.2.0
IBM Lotus Notes=8.0.2
IBM Lotus Notes=8.0.2.4
IBM Lotus Notes=7.0.3
IBM Lotus Notes=8.5.0.0
IBM Lotus Notes=7.0.4.1
IBM Lotus Notes=8.5.1.1
IBM Lotus Notes=8.5.1.0
IBM Lotus Notes=8.0
IBM Lotus Notes=7.0.4.2
IBM Lotus Notes=8.5.1.5
IBM Lotus Notes=7.0.1
IBM Lotus Notes=8.0.0
IBM Lotus Notes=8.0.2.2
IBM Lotus Notes<=8.5.2.2
IBM Lotus Notes=7.0.3.1
IBM Lotus Notes=7.0.2
Event History
May 31, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1215?
CVE-2011-1215 has a high severity rating as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2011-1215?
To fix CVE-2011-1215, update IBM Lotus Notes to version 8.5.2 FP3 or later.
3
What versions of IBM Lotus Notes are affected by CVE-2011-1215?
CVE-2011-1215 affects IBM Lotus Notes versions up to 8.5.2.2.
4
Can CVE-2011-1215 be exploited remotely?
Yes, CVE-2011-1215 can be exploited remotely via a crafted link in a Microsoft Office document attachment.
5
What is the nature of the vulnerability in CVE-2011-1215?
CVE-2011-1215 is a stack-based buffer overflow vulnerability.