Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.
Software | From | Fixed in |
---|---|---|
ibm / lotus_notes | 6.0.3 | 6.0.3.x |
ibm / lotus_notes | 6.5 | 6.5.x |