CVE-2010-0919
Severity Score
7.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
Desbordamiento de búfer basado en pila en el control ActiveX Lotus Domino Web Access en IBM Lotus iNotes (alias Domino Web Access o DWA) 6.5, 7.0 en versiones anteriores a la 7.0.4, 8.0, 8.0.2 y en versiones anteriores a la 229.281 para Domino 8.0.2 FP4 permite a atacantes remotos ejecutar código de su elección mediante un argumento URL largo a un método no especificado, alias PRAD7JTNHJ.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-03-03 CVE Reserved
- 2010-03-03 CVE Published
- 2024-07-20 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857 | Third Party Advisory | |
| http://securitytracker.com/id?1023662 | Vdb Entry | |
| http://www.osvdb.org/62612 | Vdb Entry | |
| http://www.securityfocus.com/bid/38457 | Vdb Entry | |
| http://www.securityfocus.com/bid/38459 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56555 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2010/0496 | 2017-08-17 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/38681 | 2017-08-17 | |
| http://secunia.com/advisories/38744 | 2017-08-17 | |
| http://secunia.com/advisories/38755 | 2017-08-17 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg21421808 | 2017-08-17 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg27018109 | 2017-08-17 | |
| http://www.vupen.com/english/advisories/2010/0495 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | <= 229.271 Search vendor "Ibm" for product "Lotus Inotes" and version " <= 229.271" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.011 Search vendor "Ibm" for product "Lotus Inotes" and version "229.011" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.021 Search vendor "Ibm" for product "Lotus Inotes" and version "229.021" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.031 Search vendor "Ibm" for product "Lotus Inotes" and version "229.031" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.041 Search vendor "Ibm" for product "Lotus Inotes" and version "229.041" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.051 Search vendor "Ibm" for product "Lotus Inotes" and version "229.051" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.061 Search vendor "Ibm" for product "Lotus Inotes" and version "229.061" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.101 Search vendor "Ibm" for product "Lotus Inotes" and version "229.101" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.111 Search vendor "Ibm" for product "Lotus Inotes" and version "229.111" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.131 Search vendor "Ibm" for product "Lotus Inotes" and version "229.131" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.141 Search vendor "Ibm" for product "Lotus Inotes" and version "229.141" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.151 Search vendor "Ibm" for product "Lotus Inotes" and version "229.151" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.161 Search vendor "Ibm" for product "Lotus Inotes" and version "229.161" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.171 Search vendor "Ibm" for product "Lotus Inotes" and version "229.171" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.181 Search vendor "Ibm" for product "Lotus Inotes" and version "229.181" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.191 Search vendor "Ibm" for product "Lotus Inotes" and version "229.191" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.201 Search vendor "Ibm" for product "Lotus Inotes" and version "229.201" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.211 Search vendor "Ibm" for product "Lotus Inotes" and version "229.211" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.221 Search vendor "Ibm" for product "Lotus Inotes" and version "229.221" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.231 Search vendor "Ibm" for product "Lotus Inotes" and version "229.231" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.241 Search vendor "Ibm" for product "Lotus Inotes" and version "229.241" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.251 Search vendor "Ibm" for product "Lotus Inotes" and version "229.251" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Lotus Inotes Search vendor "Ibm" for product "Lotus Inotes" | 229.261 Search vendor "Ibm" for product "Lotus Inotes" and version "229.261" | - |
Affected
| in | Ibm Search vendor "Ibm" | Lotus Domino Search vendor "Ibm" for product "Lotus Domino" | 8.0.2.4 Search vendor "Ibm" for product "Lotus Domino" and version "8.0.2.4" | - |
Safe
|
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 6.5 Search vendor "Ibm" for product "Domino Web Access" and version "6.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 7.0 Search vendor "Ibm" for product "Domino Web Access" and version "7.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 7.0.1 Search vendor "Ibm" for product "Domino Web Access" and version "7.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 7.0.2 Search vendor "Ibm" for product "Domino Web Access" and version "7.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 7.0.3 Search vendor "Ibm" for product "Domino Web Access" and version "7.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 8.0 Search vendor "Ibm" for product "Domino Web Access" and version "8.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Domino Web Access Search vendor "Ibm" for product "Domino Web Access" | 8.0.2 Search vendor "Ibm" for product "Domino Web Access" and version "8.0.2" | - |
Affected
| ||||||