Lucene search

MitreCVE-2010-3407

HistorySep 16, 2010 - 9:00 p.m.

CVE-2010-3407

2010-09-1621:00:02

CWE-119

mitre

web.nvd.nist.gov

cve-2010-3407

buffer overflow

mailcheck821address

nrouter.exe

ibm lotus domino 8.0.x

ibm lotus domino 8.5.x

remote code execution

email header

icalendar

calendar-invitation

nvd

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.928

Percentile

99.1%

JSON

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.

Affected configurations

Nvd

Node

ibmlotus_dominoMatch8.0

ibmlotus_dominoMatch8.0.1

ibmlotus_dominoMatch8.0.2

ibmlotus_dominoMatch8.0.2.1

ibmlotus_dominoMatch8.0.2.2

ibmlotus_dominoMatch8.0.2.3

ibmlotus_dominoMatch8.0.2.4

ibmlotus_dominoMatch8.5.0

ibmlotus_dominoMatch8.5.0.1

ibmlotus_dominoMatch8.5.1

ibmlotus_dominoMatch8.5.1.1

VendorProductVersionCPE
ibmlotus_domino8.0cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
ibmlotus_domino8.0.1cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.1cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.2cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.3cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.4cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*
ibmlotus_domino8.5.0cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*
ibmlotus_domino8.5.0.1cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.5.1cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_domino	8.0	cpe:2.3:a:ibm:lotus_domino:8.0:::::::*
ibm	lotus_domino	8.0.1	cpe:2.3:a:ibm:lotus_domino:8.0.1:::::::*
ibm	lotus_domino	8.0.2	cpe:2.3:a:ibm:lotus_domino:8.0.2:::::::*
ibm	lotus_domino	8.0.2.1	cpe:2.3:a:ibm:lotus_domino:8.0.2.1:::::::*
ibm	lotus_domino	8.0.2.2	cpe:2.3:a:ibm:lotus_domino:8.0.2.2:::::::*
ibm	lotus_domino	8.0.2.3	cpe:2.3:a:ibm:lotus_domino:8.0.2.3:::::::*
ibm	lotus_domino	8.0.2.4	cpe:2.3:a:ibm:lotus_domino:8.0.2.4:::::::*
ibm	lotus_domino	8.5.0	cpe:2.3:a:ibm:lotus_domino:8.5.0:::::::*
ibm	lotus_domino	8.5.0.1	cpe:2.3:a:ibm:lotus_domino:8.5.0.1:::::::*
ibm	lotus_domino	8.5.1	cpe:2.3:a:ibm:lotus_domino:8.5.1:::::::*