PT-2013-4100 · Ibm · Ibm Lotus Quickr

Publicado 2013-06-17 · Atualizado 2017-08-29 · CVE-2013-3026

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr versions 8.1 before FP 8.1.0.32-001a IBM Lotus Quickr versions 8.2 before FP 8.2.0.28-001a IBM Lotus Quickr versions 8.5.1 before FP 8.5.1.39-002a

Description The issue is related to a buffer overflow in the Lotus Quickr for Domino ActiveX control, which allows remote attackers to execute arbitrary code via a crafted web site.

Recommendations For IBM Lotus Quickr version 8.1, update to FP 8.1.0.32-001a or later. For IBM Lotus Quickr version 8.2, update to FP 8.2.0.28-001a or later. For IBM Lotus Quickr version 8.5.1, update to FP 8.5.1.39-002a or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-3026

ZDI-13-214

Produtos afetados

Ibm Lotus Quickr

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-3026 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21639643 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-13-214 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84381 · Nota