PT-2015-1206 · Ibm · Ibm Domino

Bilou · Publicado 2015-05-12 · Atualizado 2019-10-16 · CVE-2015-1903

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 8.5.3 FP6 IF6 and versions 9.0 through 9.0.1 FP3 IF2

Description The issue is caused by a stack-based buffer overflow error. This allows remote attackers to execute arbitrary code via a crafted BMP image.

Recommendations For versions 8.5 through 8.5.3 FP6 IF6, update to version 8.5.3 FP6 IF7. For versions 9.0 through 9.0.1 FP3 IF2, update to version 9.0.1 FP3 IF3. As a temporary workaround, consider restricting the processing of BMP images until a patch is available.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-10141

CVE-2015-1903

ZDI-15-194

Produtos afetados

Ibm Domino

Referências · 8

• http://zerodayinitiative.com/advisories/ZDI-15-194 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-194 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10141 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21883245 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1903 · Nota de Segurança
• http://securitytracker.com/id/1032376 · Nota
• http://securityfocus.com/bid/74598 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1903 · Nota