Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2011-0912

Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.

  • Published: Feb 8, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-0912
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
ibm / lotus_notes 8.0.2.0 8.0.2.0.x
ibm / lotus_notes 8.0.2.5 8.0.2.5.x
ibm / lotus_notes 8.0.2.1 8.0.2.1.x
ibm / lotus_notes 8.0.1 8.0.1.x
ibm / lotus_notes 8.0.2.3 8.0.2.3.x
ibm / lotus_notes 8.0.2 8.0.2.x
ibm / lotus_notes 8.0.2.4 8.0.2.4.x
ibm / lotus_notes 8.0 8.0.x
ibm / lotus_notes 8.0.2.2 8.0.2.2.x
ibm / lotus_notes 8.5.0.1 8.5.0.1.x
ibm / lotus_notes 8.5.1.3 8.5.1.3.x
ibm / lotus_notes 8.5.1.2 8.5.1.2.x
ibm / lotus_notes 8.5.1.4 8.5.1.4.x
ibm / lotus_notes 8.5.0.0 8.5.0.0.x
ibm / lotus_notes 8.5.1.1 8.5.1.1.x
ibm / lotus_notes 8.5.1.0 8.5.1.0.x