PT-2015-1170 · Ibm · Ibm Domino

Published 2015-04-15 · Updated 2019-10-16 · CVE-2015-0135

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 before 8.5.3 FP6 IF4 IBM Domino versions 9.0 before 9.0.1 FP3 IF2

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF image. This is related to errors in memory handling.

Recommendations For IBM Domino versions 8.5 before 8.5.3 FP6 IF4, update to version 8.5.3 FP6 IF4 or later. For IBM Domino versions 9.0 before 9.0.1 FP3 IF2, update to version 9.0.1 FP3 IF2 or later.

Fix

RCE

DoS

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-10057

CVE-2015-0135

ZDI-15-135

Affected Products

Ibm Domino

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21701647 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-15-135 · Security Note
• https://bdu.fstec.ru/vul/2015-10057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0135 · Security Note
• http://securitytracker.com/id/1032151 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0135 · Note
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0135 · Note