CVE-2007-4474

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 44%

from disclosure to weapon998 days

Published on NVDDec 27

1st PoC+998d

metasploitDec 20

exploitation probability

44%top 1% of all CVEs

observed exploitation

nono source reports it

4 public exploit(s)

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/4818unverified cve_referencewww.exploit-db.com/exploits/4820unverified cve_referencewww.exploit-db.com/exploits/5111unverified exploitdbwww.exploit-db.com/exploits/16502unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html http://osvdb.org/40954 http://secunia.com/advisories/28184 https://exchange.xforce.ibmcloud.com/vulnerabilities/39175 https://www.exploit-db.com/exploits/4818 https://www.exploit-db.com/exploits/4820 https://www.exploit-db.com/exploits/5111 http://www.kb.cert.org/vuls/id/963889 http://www.securityfocus.com/bid/26972 http://www.securitytracker.com/id?1019138 http://www.vupen.com/english/advisories/2007/4296