critical9.3Public exploit code
CVE-2012-2175
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Lotus iNotes dwa85W - ActiveX Buffer Overflow (Metasploit)2012-12-31 · remote · windows · Verified
Impact
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Inotes | Versions 8.5.0.0, 8.5.0.1, 8.5.1.0, 8.5.1.1, 8.5.1.2, 8.5.1.3 |