Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3407

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.

Published

2010-09-16T21:00:02.233

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm lotus_domino 8.0 Yes
Application ibm lotus_domino 8.0.1 Yes
Application ibm lotus_domino 8.0.2 Yes
Application ibm lotus_domino 8.0.2.1 Yes
Application ibm lotus_domino 8.0.2.2 Yes
Application ibm lotus_domino 8.0.2.3 Yes
Application ibm lotus_domino 8.0.2.4 Yes
Application ibm lotus_domino 8.5.0 Yes
Application ibm lotus_domino 8.5.0.1 Yes
Application ibm lotus_domino 8.5.1 Yes
Application ibm lotus_domino 8.5.1.1 Yes
References