CVE-2017-1130: Medium severity IBM iNotes vulnerability
Published Sep 5, 2017
·Updated
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371.
Affected Software
14 affected components
IBM iNotes=8.5.0.0
IBM iNotes=8.5.1.0
IBM iNotes=8.5.1.1
IBM iNotes=8.5.1.5
IBM iNotes=8.5.2.0
IBM iNotes=8.5.2.1
IBM iNotes=8.5.2.4
IBM iNotes=8.5.3.0
IBM iNotes=8.5.3.1
IBM iNotes=8.5.3.6
IBM iNotes=9.0.0.0
IBM iNotes=9.0.1.0
IBM iNotes=9.0.1.1
IBM iNotes=9.0.1.8
Remediation
Patch Available
Event History
Sep 5, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1130?
The severity of CVE-2017-1130 is rated as moderate due to its potential to cause a denial of service.
2
How do I fix CVE-2017-1130?
To fix CVE-2017-1130, upgrading to the latest version of IBM Notes or applying available patches is recommended.
3
Who is affected by CVE-2017-1130?
CVE-2017-1130 affects users of IBM Notes versions 8.5 and 9.0.
4
What type of vulnerability is CVE-2017-1130?
CVE-2017-1130 is a denial of service vulnerability that can cause the IBM Notes client to hang.
5
Can CVE-2017-1130 be exploited remotely?
Yes, CVE-2017-1130 can be exploited remotely if a user is tricked into clicking a malicious link.