CVE-2012-2174

Published Jun 20, 2012
Last updated 7 years ago
Overview

Description: The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.
Source: psirt@us.ibm.com
NVD status: Modified
Hype score: Not currently trending
Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses

nvd@nist.gov: CWE-94
Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "692E295E-E650-42D5-AF7A-D6276C3D76E0"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1E25625-8570-4744-A2A2-4A4FB4D8AC6A"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50660BA1-A24A-4DBF-AB59-1CF04FA54120"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5759CBCB-7B3F-462A-B51A-FD2C6B13CCE6"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "69A79FA5-83FB-4067-B2A6-17EAF3947998"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17815F4E-BB34-40D2-A3EE-3C7741940D1B"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7DE79982-9E92-498A-B961-55CB1D2D104F"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6814E3F-479C-4F56-BF66-C685E60CCA34"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BB9EF5DE-4432-4099-AD59-CDD52E387BB8"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1013797-0442-46A7-A94F-354388BA6B69"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0CC228A3-1878-4A9F-8664-F4DFF77BF74B"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0119A252-73B1-490F-9371-06E8FDB8B979"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "57D24791-E798-4B08-A051-E880DEFB8268"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2758590C-67FD-4DD6-84C1-0D32264BBE5F"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7FC083C-B25E-427F-B722-B5ABD4F072F1"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0B0CF8A5-BC24-4204-BC06-2E1E2FB60E4D"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CDA723DB-62C5-4C84-B0BA-5313FDA49D73"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92F08B96-D43E-407E-839C-4C3C5BB58B2B"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5E50C779-C780-45FB-BC77-B9717389D2EB"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "867779A4-A7A5-48AD-9AC0-C6476719A5EE"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B7B7544-D60C-4B9A-BC29-B30AD86EC9B9"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D475EF5-DBB3-4B98-BB07-83A2632B5E0D"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F797A209-65C0-4A20-9DA2-C5576C091DE2"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9B01BCFA-13B4-4AB3-9558-4B704F6DCFA2"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D027E003-84C9-4290-A032-649C5E66B23B"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D9A13AC-B552-4E86-9E5D-62354D78E49C"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E5CDBCB-F314-453B-B837-B03B53215748"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]
Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References
