CVE-2015-0135 — IBM Domino vulnerability

CWE-1893 documents3 sources
Severity
10.0CRITICALNVD
EPSS
32.4%
top 3.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Domino
Timeline
PublishedApr 21
Latest updateMay 13

Description

IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer truncation and application crash) via a crafted GIF image, aka SPR KLYH9T7NT9.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/domino4 versions+3

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rg4h-7xxj-p5q9: IBM Domino 8↗2022-05-13
▶
CVEList
CVE-2015-0135: IBM Domino 8↗2015-04-21
▶
CVE-2015-0135 — IBM Domino vulnerability | cvebase