Description
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
References
- 20030217 Domino Advisories UPDATE mailing-list
- http://www-1.ibm.com/support/docview.wss?uid=swg21104543
- CA-2003-11 third-party-advisory
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- 6872 vdb-entry
- VU#571297 third-party-advisory
- 20030217 Domino Advisories UPDATE mailing-list
- N-065 third-party-advisory government-resource
- lotus-notes-activex-bo(11339) vdb-entry
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list