CVE Feed

    Dashboard / CVE / CVE-2010-3407

    CVE-2010-3407

    Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.

    Published:Sep 16, 2010
    Last Modified:Apr 11, 2025
    EPS:Sep 16, 2010
    EPSS Score:0.77741
    CVSS Score:9.3

    Affected Products

    Vendor
    Ibm
    Product
    Lotus Domino

    Exploits

    http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdfhttp://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdfhttps://www.exploit-db.com/exploits/15005https://www.exploit-db.com/exploits/17151

    Related CVEs

    CVE-2014-3086 (CVSS 7.5) — Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service…
    CVE-2014-0913 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 al…
    CVE-2014-0892 (CVSS 5) — IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorre…
    CVE-2014-0822 (CVSS 7.8) — The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to…
    CVE-2013-4064 (CVSS 2.1) — Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1…
    CVE-2013-4065 (CVSS 2.6) — Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1…
    CVE-2013-4063 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1…
    CVE-2013-4050 (CVSS 6) — Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 …
    CVE-2013-4055 (CVSS 3.5) — Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0…
    CVE-2013-4051 (CVSS 3.5) — Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0…

    References

    http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/
    http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf
    http://secunia.com/advisories/41433
    http://securitytracker.com/id?1024448
    http://www-01.ibm.com/support/docview.wss?uid=swg21446515
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument
    http://www.exploit-db.com/exploits/15005
    http://www.securityfocus.com/archive/1/513706/100/0/threaded
    http://www.securityfocus.com/bid/43219
    http://www.vupen.com/english/advisories/2010/2381
    http://www.zerodayinitiative.com/advisories/ZDI-10-177/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61790
    http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/
    http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf
    http://secunia.com/advisories/41433
    http://securitytracker.com/id?1024448
    http://www-01.ibm.com/support/docview.wss?uid=swg21446515
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument
    http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument
    http://www.exploit-db.com/exploits/15005
    http://www.securityfocus.com/archive/1/513706/100/0/threaded
    http://www.securityfocus.com/bid/43219
    http://www.vupen.com/english/advisories/2010/2381
    http://www.zerodayinitiative.com/advisories/ZDI-10-177/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61790

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High