CVE-2011-1216

Currently unrated

Key Information:

Vendor
IBM
Status
Lotus Notes
Vendor
CVE Published:
31 May 2011

Summary

Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.

References

http://www.ibm.com/support/docview.wss?uid=swg21500034
x_refsource_CONFIRM
http://www.securityfocus.com/bid/47962
vdb-entryx_refsource_BID
http://secunia.com/advisories/44624
third-party-advisoryx_refsource_SECUNIA

EPSS Score

34% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.