Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2015-5040

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than CVE-2015-4994.

  • Published: Oct 29, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-5040
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
ibm / domino 8.5.1.4 8.5.1.4.x
ibm / domino 8.5.3.6 8.5.3.6.x
ibm / domino 9.0.1.1 9.0.1.1.x
ibm / domino 8.5.0.1 8.5.0.1.x
ibm / domino 9.0.1.2 9.0.1.2.x
ibm / domino 8.5.3.5 8.5.3.5.x
ibm / domino 9.0.1 9.0.1.x
ibm / domino 8.5.1.1 8.5.1.1.x
ibm / domino 8.5.3.1 8.5.3.1.x
ibm / domino 8.5.0 8.5.0.x
ibm / domino 8.5.1.2 8.5.1.2.x
ibm / domino 8.5.3.4 8.5.3.4.x
ibm / domino 8.5.2.4 8.5.2.4.x
ibm / domino 8.5.1 8.5.1.x
ibm / domino 8.5.1.3 8.5.1.3.x
ibm / domino 9.0.1.4 9.0.1.4.x
ibm / domino 8.5.2.2 8.5.2.2.x
ibm / domino 8.5.3 8.5.3.x
ibm / domino 8.5.3.2 8.5.3.2.x
ibm / domino 8.5.2.3 8.5.2.3.x
ibm / domino 9.0.1.3 9.0.1.3.x
ibm / domino 8.5.2.1 8.5.2.1.x
ibm / domino 8.5.1.5 8.5.1.5.x
ibm / domino 8.5.2 8.5.2.x
ibm / domino 8.5.3.3 8.5.3.3.x