Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2015-1902

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA.

Published: May 20, 2015
Updated: Apr 13, 2023
CVE: CVE-2015-1902
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
ibm / domino	9.0.1	9.0.1.x
ibm / domino	8.5.0	8.5.0.x
ibm / domino	8.5.1	8.5.1.x
ibm / domino	8.5.3	8.5.3.x
ibm / domino	8.5.2	8.5.2.x

http://www-01.ibm.com/support/docview.wss?uid=swg21883245
http://www.securityfocus.com/bid/74597
http://www.securitytracker.com/id/1032376
http://www.zerodayinitiative.com/advisories/ZDI-15-193

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo