PT-2009-5441 · Microsoft+1 · Internet Explorer+1

Publicado 2009-09-09 · Atualizado 2018-10-10 · CVE-2009-3114

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions 8.0 through 8.5

Description: The issue concerns the RSS reader widget, which saves items from an RSS feed as local HTML documents. This allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed.

Recommendations: For IBM Lotus Notes versions 8.0 through 8.5, consider disabling the RSS reader widget until a patch is available to prevent the execution of arbitrary scripts.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-3114

Produtos afetados

Ibm Lotus Notes

Internet Explorer

Referências · 7

• http://securityfocus.com/bid/36305 · Nota
• http://scip.ch/?vuldb.4021 · Nota
• http://securityfocus.com/archive/1/506296/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3114 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21403834 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3114 · Nota de Segurança
• http://secunia.com/advisories/36813 · Aviso do Fabricante