|
|
CVE Reference: CVE-2007-4474 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-4474 |
|
|
Description: Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/39175 ST 1019138 SAID Secunia Advisory: SA28184 OSVDB 40954 MILW0RM http://www.milw0rm.com/exploits/4820 http://www.milw0rm.com/exploits/4818 http://www.milw0rm.com/exploits/5111 FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html CERT-VN 963889 BID 26972 |
|
| Return to the previous page. |
