Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2011-02-08 14:00
Updated : 2017-09-18 18:32
NVD link : CVE-2011-0912
Mitre link : CVE-2011-0912
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
ibm
- lotus_notes