Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-4474 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Domino WEB Access

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents4 sources
Severity
9.3CRITICALNVD
EPSS
87.3%
top 0.54%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
IBM Domino WEB AccessIBM Lotus Domino WEB Access
Timeline
PublishedDec 27
Latest updateMay 1

Description

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDibm/lotus_domino_web_access7.0.1, 7.0.34.1+1
▶NVDibm/domino_web_access15 versions+14

🔴Vulnerability Details

2
GHSA
GHSA-v28w-5h8r-rj75: Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6↗2022-05-01
▶
CVEList
CVE-2007-4474: Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6↗2007-12-27
▶

💥Exploits & PoCs

4
Exploit-DB
IBM Lotus Domino Web Access Upload Module - Remote Buffer Overflow (Metasploit)↗2010-09-20
▶
Exploit-DB
IBM Domino Web Access Upload Module - Overwrite (SEH)↗2008-02-13
▶
Exploit-DB
IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow↗2007-12-30
▶
Exploit-DB
IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow↗2007-12-30
▶
CVE-2007-4474 — IBM Domino WEB Access vulnerability | cvebase