CVE-2011-1512

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
21.6%
top 4.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Notes
Timeline
PublishedMay 31
Latest updateMay 14

Description

Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/lotus_notes8.5.2.2+100

🔴Vulnerability Details

2
GHSA
GHSA-8r4r-fpc5-g7v5: Heap-based buffer overflow in xlssr↗2022-05-14
▶
CVEList
CVE-2011-1512: Heap-based buffer overflow in xlssr↗2011-05-31
▶