critical10.0
CVE-2011-0914
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary …
Impact
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Domino | through 8.5.2.2 Versions 4.6.1, 4.6.3, 4.6.4, 5.0, 5.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/43208
- http://www-01.ibm.com/support/docview.wss?uid=swg21461514
- http://zerodayinitiative.com/advisories/ZDI-11-052/
- http://secunia.com/advisories/43208
- http://www-01.ibm.com/support/docview.wss?uid=swg21461514
- http://zerodayinitiative.com/advisories/ZDI-11-052/