PT-2013-4101 · Ibm · Ibm Domino

Published 2013-08-09 · Updated 2017-08-29 · CVE-2013-3027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 9.0 before IF3

Description The issue is related to an integer overflow in the DWA9W ActiveX control in iNotes, which allows remote attackers to execute arbitrary code via a crafted web page.

Recommendations For versions 9.0 before IF3, apply the IF3 patch to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2013-3027

ZDI-13-213

Affected Products

Ibm Domino

References · 6

• https://zerodayinitiative.com/advisories/ZDI-13-213 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-3027 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21645503 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84381 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21644599 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3027 · Note