CVE-2010-3407

2010-09-1621:00:02

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.928

Percentile

99.1%

JSON

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.

Affected configurations

Nvd

Node

ibmlotus_dominoMatch8.0

ibmlotus_dominoMatch8.0.1

ibmlotus_dominoMatch8.0.2

ibmlotus_dominoMatch8.0.2.1

ibmlotus_dominoMatch8.0.2.2

ibmlotus_dominoMatch8.0.2.3

ibmlotus_dominoMatch8.0.2.4

ibmlotus_dominoMatch8.5.0

ibmlotus_dominoMatch8.5.0.1

ibmlotus_dominoMatch8.5.1

ibmlotus_dominoMatch8.5.1.1

VendorProductVersionCPE
ibmlotus_domino8.0cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
ibmlotus_domino8.0.1cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.1cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.2cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.3cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.4cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*
ibmlotus_domino8.5.0cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*
ibmlotus_domino8.5.0.1cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.5.1cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_domino	8.0	cpe:2.3:a:ibm:lotus_domino:8.0:::::::*
ibm	lotus_domino	8.0.1	cpe:2.3:a:ibm:lotus_domino:8.0.1:::::::*
ibm	lotus_domino	8.0.2	cpe:2.3:a:ibm:lotus_domino:8.0.2:::::::*
ibm	lotus_domino	8.0.2.1	cpe:2.3:a:ibm:lotus_domino:8.0.2.1:::::::*
ibm	lotus_domino	8.0.2.2	cpe:2.3:a:ibm:lotus_domino:8.0.2.2:::::::*
ibm	lotus_domino	8.0.2.3	cpe:2.3:a:ibm:lotus_domino:8.0.2.3:::::::*
ibm	lotus_domino	8.0.2.4	cpe:2.3:a:ibm:lotus_domino:8.0.2.4:::::::*
ibm	lotus_domino	8.5.0	cpe:2.3:a:ibm:lotus_domino:8.5.0:::::::*
ibm	lotus_domino	8.5.0.1	cpe:2.3:a:ibm:lotus_domino:8.5.0.1:::::::*
ibm	lotus_domino	8.5.1	cpe:2.3:a:ibm:lotus_domino:8.5.1:::::::*