CVE-2015-1903

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
ibmdomino
8.5.0
ibmdomino
8.5.1
ibmdomino
8.5.2
ibmdomino
8.5.3
ibmdomino
9.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21883245
http://www.securityfocus.com/bid/74598
http://www.securitytracker.com/id/1032376
http://www.zerodayinitiative.com/advisories/ZDI-15-194
http://www-01.ibm.com/support/docview.wss?uid=swg21883245
http://www.securityfocus.com/bid/74598
http://www.securitytracker.com/id/1032376
http://www.zerodayinitiative.com/advisories/ZDI-15-194