KLA10202 ACE vulnerabilities in IBM Lotus Notes

An unspecified vulnerability was found in IBM products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to gcc keys. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited by remote via specially designed .xls, .zip, .prz, .rtf or Applix attachments;
2. An integer underflow can be exploited remotely via a specially designed .lzh attachement

Original advisories

Related products

IBM-Notes

CVE list

CVE-2011-1213 critical

CVE-2011-1217 critical

CVE-2011-1218 critical

CVE-2011-1214 critical

CVE-2011-1216 critical

CVE-2011-1512 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IBM Lotus Notes versions 8.5.2.2 and earlier