PT-2013-4101 · Ibm · Ibm Domino

Publicado 2013-08-09 · Atualizado 2017-08-29 · CVE-2013-3027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 9.0 before IF3

Description The issue is related to an integer overflow in the DWA9W ActiveX control in iNotes, which allows remote attackers to execute arbitrary code via a crafted web page.

Recommendations For versions 9.0 before IF3, apply the IF3 patch to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2013-3027

ZDI-13-213

Produtos afetados

Ibm Domino

Referências · 6

• https://zerodayinitiative.com/advisories/ZDI-13-213 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84381 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3027 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21645503 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21644599 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3027 · Nota