cbcvebase.
CVE-2013-2977
published 2013-05-10

CVE-2013-2977: Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1…

PriorityP338medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
4.69%
90.7th percentile
Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q.

Affected

20 ranges
VendorProductVersion rangeFixed in
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
ibmlotus_notes——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.