cbcvebase.
CVE-2011-0914
published 2011-02-08

CVE-2011-0914: Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary…

PriorityP350critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.66%
90.7th percentile
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.

Affected

74 ranges· showing 25
VendorProductVersion rangeFixed in
ibmlotus_domino<= 8.5.2.2—
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
ibmlotus_domino——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.