CVE-2016-0278

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.8HIGH
EPSS
1.9%
top 16.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Domino
Timeline
PublishedJun 26
Latest updateMay 13

Description

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDibm/domino22 versions+21

🔴Vulnerability Details

2
GHSA
GHSA-pmc9-x67w-5fv5: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8↗2022-05-13
▶
CVEList
CVE-2016-0278: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8↗2016-06-26
▶
CVE-2016-0278 (HIGH CVSS 7.8) | Heap-based buffer overflow in the K | cvebase.io