CVE-2007-4474

50Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 44%

de la publicación al arma998 días

Publicada en NVD27 dic

1ª PoC+998d

metasploit20 dic

probabilidad de explotación

44%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

4 exploit(s) público(s)

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 4

cve_referencewww.exploit-db.com/exploits/4818no verificado cve_referencewww.exploit-db.com/exploits/4820no verificado cve_referencewww.exploit-db.com/exploits/5111no verificado exploitdbwww.exploit-db.com/exploits/16502no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html http://osvdb.org/40954 http://secunia.com/advisories/28184 https://exchange.xforce.ibmcloud.com/vulnerabilities/39175 https://www.exploit-db.com/exploits/4818 https://www.exploit-db.com/exploits/4820 https://www.exploit-db.com/exploits/5111 http://www.kb.cert.org/vuls/id/963889 http://www.securityfocus.com/bid/26972 http://www.securitytracker.com/id?1019138 http://www.vupen.com/english/advisories/2007/4296