CVE-2012-2175: Buffer Overflow
Published Jun 20, 2012
·Updated
Buffer overflow in the AttachmentTimes method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
Affected Software
14 affected components
IBM Lotus iNotes=8.5.0.0
IBM Lotus iNotes=8.5.0.1
IBM Lotus iNotes=8.5.1.0
IBM Lotus iNotes=8.5.1.1
IBM Lotus iNotes=8.5.1.2
IBM Lotus iNotes=8.5.1.3
IBM Lotus iNotes=8.5.1.4
IBM Lotus iNotes=8.5.1.5
IBM Lotus iNotes=8.5.2.0
IBM Lotus iNotes=8.5.2.1
IBM Lotus iNotes=8.5.2.2
IBM Lotus iNotes=8.5.2.3
IBM Lotus iNotes=8.5.3.0
IBM Lotus iNotes=8.5.3.1
Event History
Jun 20, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2175?
CVE-2012-2175 has a severity rating that indicates it poses a significant risk of arbitrary code execution.
2
How do I fix CVE-2012-2175?
To fix CVE-2012-2175, update IBM Lotus iNotes to version 8.5.3 FP2 or later.
3
What vulnerabilities are associated with CVE-2012-2175?
CVE-2012-2175 is associated with a buffer overflow vulnerability in the Attachment_Times method of the dwa85W.dll ActiveX control.
4
What versions of IBM Lotus iNotes are affected by CVE-2012-2175?
CVE-2012-2175 affects IBM Lotus iNotes versions 8.5.0.0 to 8.5.3.1 prior to the security fix.
5
Who can exploit CVE-2012-2175?
Remote attackers can exploit CVE-2012-2175 by supplying a long argument to the vulnerable ActiveX control.