CVE-2015-4994: Buffer Overflow

Published Oct 29, 2015

Updated

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than CVE-2015-5040.

Affected Software

5 affected components

IBM Domino=8.5.0

IBM Domino=8.5.1

IBM Domino=8.5.2

IBM Domino=8.5.3

IBM Domino=9.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21969050

Event History

Oct 29, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4994?

CVE-2015-4994 is considered a critical security vulnerability due to its potential for remote code execution or causing a denial of service.

How do I fix CVE-2015-4994?

To fix CVE-2015-4994, update IBM Domino to version 8.5.3 FP6 IF10 or 9.0.1 FP4 IF3 or later.

What software is affected by CVE-2015-4994?

CVE-2015-4994 affects IBM Domino versions 8.5.0 to 8.5.3 before FP6 IF10 and 9.0.1 before FP4 IF3.

What kind of attack can exploit CVE-2015-4994?

An attacker can exploit CVE-2015-4994 by sending a crafted GIF image to trigger a buffer overflow.

What are the potential consequences of CVE-2015-4994?

Exploiting CVE-2015-4994 can result in arbitrary code execution or crashes of the SMTP daemon, leading to denial of service.