Vulnerability Bulletins |
IBM Security Bulletin: Multiple Vulnerabilities in IBM Notes, iNotes and Domino (CVE-2014-8917, CVE-2015-1902, CVE-2015-1903) |
|
| Affected software | IBM |
|
IBM Domino contains two image parsing buffer overflow vulnerabilities. A remote attacker could exploit these vulnerabilities to execute code or crash the Domino SMTP server. In addition, IBM Notes, iNotes and Domino are vulnerable to a cross-site scripting vulnerability in the IBM Dojo Tookit. Refer to the links below for fix downloads. CVE(s): CVE-2014-8917, CVE-2015-1902 and CVE-2015-1903 Affected product(s) and affected version(s): IBM Notes and Domino 9.0.1 Fix Pack 3 (plus Interim More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_notes_inotes_and_domino_cve_2014_8917_cve_2015_1902_cve_2015_1903?lang=en_us |
|