CVE-2013-3027: Integer Overflow
Published Aug 9, 2013
·Updated
Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a crafted web page, aka SPR PTHN97XHFW.
Affected Software
1 affected component
IBM Lotus Domino=9.0.0.0
Event History
Aug 9, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3027?
CVE-2013-3027 has a high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2013-3027?
To fix CVE-2013-3027, update to IBM Domino version 9.0 IF3 or later.
3
What types of attacks can exploit CVE-2013-3027?
CVE-2013-3027 can be exploited via crafted web pages that trigger integer overflow vulnerabilities.
4
Which versions of IBM Domino are affected by CVE-2013-3027?
CVE-2013-3027 affects IBM Lotus Domino version 9.0.0.0 before IF3.
5
Is user interaction required to exploit CVE-2013-3027?
Yes, user interaction is required to exploit CVE-2013-3027 by visiting a malicious web page.