NVD

Id
14792  
Name
CVE-2010-3407  
Description
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-16  
Modified Date
2013-08-24  
Seq
2010-3407  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81846 14792 CVE-2010-3407 http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/  View
81847 14792 CVE-2010-3407 http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf  View
81848 14792 CVE-2010-3407 1024448  View
81849 14792 CVE-2010-3407 http://www-01.ibm.com/support/docview.wss?uid=swg21446515  View
81850 14792 CVE-2010-3407 http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument  View
81851 14792 CVE-2010-3407 http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument  View
81852 14792 CVE-2010-3407 http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument  View
81853 14792 CVE-2010-3407 15005  View
81854 14792 CVE-2010-3407 20100914 ZDI-10-177: IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability  View
81855 14792 CVE-2010-3407 43219  View
81856 14792 CVE-2010-3407 ADV-2010-2381  View
81857 14792 CVE-2010-3407 http://www.zerodayinitiative.com/advisories/ZDI-10-177/  View
81858 14792 CVE-2010-3407 lotus-domino-icalendar-bo(61790)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36325 JVNDB-2010-002105 IBM Lotus Domino サーバの MailCheck821Address 関数におけるスタックベースのバッファオーバーフローの脆弱性 IBM Lotus Domino のサーバ内にある nrouter.exe サービスの nnotes.dll の MailCheck821Address 関数には、iCalendar calendar-invitation 電子メールメッセージの ORGANIZER:mailto ヘッダ内における、長大な電子メールアドレスの処理に関して不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-3407 45987 CVE-2010-3407 14792 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002105.html 2010-09-16 2010-10-06 View