CVE-2015-1903

Currently unrated

Key Information:

Vendor
IBM
Status
Domino
Vendor
CVE Published:
20 May 2015

Summary

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21883245
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-15-194
x_refsource_MISC
http://www.securityfocus.com/bid/74598
vdb-entryx_refsource_BID

EPSS Score

51% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.