PT-2015-1170 · Ibm · Ibm Domino

Publicado 2015-04-15 · Atualizado 2019-10-16 · CVE-2015-0135

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 before 8.5.3 FP6 IF4 IBM Domino versions 9.0 before 9.0.1 FP3 IF2

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF image. This is related to errors in memory handling.

Recommendations For IBM Domino versions 8.5 before 8.5.3 FP6 IF4, update to version 8.5.3 FP6 IF4 or later. For IBM Domino versions 9.0 before 9.0.1 FP3 IF2, update to version 9.0.1 FP3 IF2 or later.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-10057

CVE-2015-0135

ZDI-15-135

Produtos afetados

Ibm Domino

Referências · 7

• http://securitytracker.com/id/1032151 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21701647 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-15-135 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10057 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-0135 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0135 · Nota
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0135 · Nota