CVE-2010-0919
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-0919
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Lotus iNotes ActiveX控件URL处理栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Lotus iNotes是美国IBM公司的一套基于Web的电子邮件软件。该软件可帮助不同类型的用户（在线用户和离线用户）有效地管理关键业务信息和协作。 Domino Web Access ActiveX控件(dwa8.dll，dwa8w.dll)在处理URL时没有执行长度检查便将其拷贝到了固定大小的栈缓冲区中，用户受骗访问了恶意网页并传送了超长参数的话就可以触发栈溢出，导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-0919
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-0919
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-0919 (12)
- http://www-01.ibm.com/support/docview.wss?uid=swg21421808x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg27018109x_refsource_CONFIRM
Other References for CVE-2010-0919 (1)
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857third-party-advisoryx_refsource_IDEFENSE
Same Patch Batch · n/a · 2010-03-03 · 22 CVEs total
| CVE-2010-0205 | Libpng png_decompress_chunk()函数拒绝服务漏洞 | |
| CVE-2010-0925 | Apple Safari CFNetwork 'cfnetwork.dll' SRC 属性拒绝服务漏洞 | |
| CVE-2010-0924 | Apple Safari CFNetwork 'cfnetwork.dll' BACKGROUND属性拒绝服务漏洞 | |
| CVE-2010-0923 | KDE kdebase 'workspace/krunner/lock/lockdlg.cc' 竞争条件漏洞 | |
| CVE-2010-0922 | IBM AIX LDAP 登录本地拒绝服务漏洞 | |
| CVE-2010-0921 | IBM Lotus iNotes 跨站请求伪造漏洞 | |
| CVE-2010-0920 | IBM Lotus iNotes跨站脚本攻击漏洞 | |
| CVE-2010-0918 | IBM Lotus iNotes UltraLite多个未明漏洞 | |
| CVE-2010-0917 | Windows VBScript 多个栈缓冲区错误漏洞 | |
| CVE-2010-0766 | Luxology Modo 401 'valet4.dll' 整数溢出漏洞 | |
| CVE-2010-0483 | Microsoft Internet Explorer winhlp32.exe服务远程代码执行漏洞 | |
| CVE-2009-4656 | E-Soft DJ Studio Pro 栈缓冲区溢出漏洞 | |
| CVE-2010-0156 | Puppet任意文件覆盖漏洞 | |
| CVE-2009-4664 | Firewall Builder不安全临时文件创建漏洞 | |
| CVE-2009-4663 | Quiksoft EasyMail Objects AddAttachment()方式缓冲区溢出漏洞 | |
| CVE-2009-4662 | Novell GroupWise WebAccess User.Theme.index参数跨站脚本漏洞 | |
| CVE-2009-4661 | BigAnt Server多个缓冲区溢出漏洞 | |
| CVE-2009-4660 | BigAnt IM HTTP GET请求栈溢出漏洞 | |
| CVE-2009-4659 | MP3-Cutter Ease Audio Cutter未明漏洞 | |
| CVE-2009-4658 | Omidrouhani Xerver拒绝服务漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-0919
No comments yet