PT-2013-4100 · Ibm · Ibm Lotus Quickr

Published 2013-06-17 · Updated 2017-08-29 · CVE-2013-3026

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr versions 8.1 before FP 8.1.0.32-001a IBM Lotus Quickr versions 8.2 before FP 8.2.0.28-001a IBM Lotus Quickr versions 8.5.1 before FP 8.5.1.39-002a

Description The issue is related to a buffer overflow in the Lotus Quickr for Domino ActiveX control, which allows remote attackers to execute arbitrary code via a crafted web site.

Recommendations For IBM Lotus Quickr version 8.1, update to FP 8.1.0.32-001a or later. For IBM Lotus Quickr version 8.2, update to FP 8.2.0.28-001a or later. For IBM Lotus Quickr version 8.5.1, update to FP 8.5.1.39-002a or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3026

ZDI-13-214

Affected Products

Ibm Lotus Quickr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-3026 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21639643 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-214 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84381 · Note