Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
| Software | From | Fixed in |
|---|---|---|
| ibm / lotus_domino | 6.0 | 6.0.x |
| ibm / lotus_domino | 6.5 | 6.5.x |
| ibm / lotus_domino | 7.0 | 7.0.x |
| ibm / lotus_domino | 8.0 | 8.0.x |
| ibm / lotus_domino | 8.0.1 | 8.0.1.x |