Skip to content
OpenAdvisories
High · 7.8 CVE-2018-1437 EUVD-2018-12016GHSA-x3h5-3jh8-247m

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted sea…

Published Mar 14, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Notes

Description

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.

Affected products

VendorProductAffectedFixed
IBM Notes 8.5.3.6, 8.5, 8.5.1, 8.5.1.5, 8.5.2, 8.5.2.4, 8.5.3, 9.0.1, 9.0, 8.5.0.2, 9.0.1.9 —

References