PT-2012-3857 · Ibm · Ibm Lotus Notes

Published 2012-06-20 · Updated 2017-08-29 · CVE-2012-2174

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes versions prior to 8.5.3 FP2

Description The issue concerns a URL handler in IBM Lotus Notes that allows remote attackers to execute arbitrary code via a crafted notes:// URL. This is a result of a command injection vulnerability in the URL handling mechanism.

Recommendations For versions prior to 8.5.3 FP2, update to version 8.5.3 FP2 or later to resolve the issue.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-2174

ZDI-12-154

Affected Products

Ibm Lotus Notes

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/notes_handler_cmdinject.rb · Exploit
• 🔥 https://exploit-db.com/exploits/23650 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2174 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-154 · Security Note
• http://ibm.com/support/docview.wss?uid=swg21598348 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75320 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2174 · Note