Vulnerability Details CVE-2007-4222
Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.188
EPSS Ranking 94.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=604
- http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21272930
- http://www.securityfocus.com/bid/26200
- http://www.securitytracker.com/id?1018857
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37363
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=604
- http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21272930
- http://www.securityfocus.com/bid/26200
- http://www.securitytracker.com/id?1018857
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37363
Products affected by CVE-2007-4222
-
cpe:2.3:a:ibm:lotus_notes:-
-
cpe:2.3:a:ibm:lotus_notes:0.2
-
cpe:2.3:a:ibm:lotus_notes:3.0
-
cpe:2.3:a:ibm:lotus_notes:3.0.0.1
-
cpe:2.3:a:ibm:lotus_notes:3.0.0.2
-
cpe:2.3:a:ibm:lotus_notes:4.2
-
cpe:2.3:a:ibm:lotus_notes:4.2.1
-
cpe:2.3:a:ibm:lotus_notes:4.2.2
-
cpe:2.3:a:ibm:lotus_notes:4.5
-
cpe:2.3:a:ibm:lotus_notes:4.6
-
cpe:2.3:a:ibm:lotus_notes:4.6.7a
-
cpe:2.3:a:ibm:lotus_notes:4.6.7h
-
cpe:2.3:a:ibm:lotus_notes:5.0
-
cpe:2.3:a:ibm:lotus_notes:5.0.1
-
cpe:2.3:a:ibm:lotus_notes:5.0.1.02
-
cpe:2.3:a:ibm:lotus_notes:5.0.10
-
cpe:2.3:a:ibm:lotus_notes:5.0.11
-
cpe:2.3:a:ibm:lotus_notes:5.0.12
-
cpe:2.3:a:ibm:lotus_notes:5.0.1a
-
cpe:2.3:a:ibm:lotus_notes:5.0.1b
-
cpe:2.3:a:ibm:lotus_notes:5.0.1c
-
cpe:2.3:a:ibm:lotus_notes:5.0.2
-
cpe:2.3:a:ibm:lotus_notes:5.0.2a
-
cpe:2.3:a:ibm:lotus_notes:5.0.2b
-
cpe:2.3:a:ibm:lotus_notes:5.0.2c
-
cpe:2.3:a:ibm:lotus_notes:5.0.3
-
cpe:2.3:a:ibm:lotus_notes:5.0.4
-
cpe:2.3:a:ibm:lotus_notes:5.0.4a
-
cpe:2.3:a:ibm:lotus_notes:5.0.5
-
cpe:2.3:a:ibm:lotus_notes:5.0.5.01
-
cpe:2.3:a:ibm:lotus_notes:5.0.5.02
-
cpe:2.3:a:ibm:lotus_notes:5.0.6
-
cpe:2.3:a:ibm:lotus_notes:5.0.6a
-
cpe:2.3:a:ibm:lotus_notes:5.0.6a.01
-
cpe:2.3:a:ibm:lotus_notes:5.0.7
-
cpe:2.3:a:ibm:lotus_notes:5.0.7a
-
cpe:2.3:a:ibm:lotus_notes:5.0.8
-
cpe:2.3:a:ibm:lotus_notes:5.0.9
-
cpe:2.3:a:ibm:lotus_notes:5.0.9a
-
cpe:2.3:a:ibm:lotus_notes:5.02
-
cpe:2.3:a:ibm:lotus_notes:5.0a
-
cpe:2.3:a:ibm:lotus_notes:6.0
-
cpe:2.3:a:ibm:lotus_notes:6.0.1
-
cpe:2.3:a:ibm:lotus_notes:6.0.2
-
cpe:2.3:a:ibm:lotus_notes:6.0.2.2
-
cpe:2.3:a:ibm:lotus_notes:6.0.3
-
cpe:2.3:a:ibm:lotus_notes:6.0.4
-
cpe:2.3:a:ibm:lotus_notes:6.0.5
-
cpe:2.3:a:ibm:lotus_notes:6.5
-
cpe:2.3:a:ibm:lotus_notes:6.5.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.2
-
cpe:2.3:a:ibm:lotus_notes:6.5.3
-
cpe:2.3:a:ibm:lotus_notes:6.5.3.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.4
-
cpe:2.3:a:ibm:lotus_notes:6.5.4.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.4.2
-
cpe:2.3:a:ibm:lotus_notes:6.5.4.3
-
cpe:2.3:a:ibm:lotus_notes:6.5.5
-
cpe:2.3:a:ibm:lotus_notes:6.5.5.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.5.2
-
cpe:2.3:a:ibm:lotus_notes:6.5.5.3
-
cpe:2.3:a:ibm:lotus_notes:6.5.6
-
cpe:2.3:a:ibm:lotus_notes:6.5.6.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.6.2
-
cpe:2.3:a:ibm:lotus_notes:6.5.6.3
-
cpe:2.3:a:ibm:lotus_notes:7.0
-
cpe:2.3:a:ibm:lotus_notes:7.0.0
-
cpe:2.3:a:ibm:lotus_notes:7.0.1
-
cpe:2.3:a:ibm:lotus_notes:7.0.1.1
-
cpe:2.3:a:ibm:lotus_notes:7.0.2