Unscored severity · published Mar 3, 2010
CVE-2010-0919
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DW
Domino Web Access · Ibm
6.5; 7.0; 7.0.1; 7.0.2; 7.0.3; 8.0; +1 more · source: NVD
LI
Lotus Inotes · Ibm
through 229.271; 229.011; 229.021; 229.031; 229.041; 229.051; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0919
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0919
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
Vendor Advisory
http://secunia.com/advisories/38681
Vendor Advisory
http://secunia.com/advisories/38744
Vendor Advisory
http://secunia.com/advisories/38755
securitytracker.com
http://securitytracker.com/id?1023662
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21421808
More from Domino Web Access
–
CVE-2010-0276
IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that…
–
CVE-2009-3105
Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script…
–
CVE-2007-4474
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x…