CVE-2011-1218: ibm lotus_notes
CVSS: 9.3v2.0HighModified
Published 31-05-2011Last modified 06-08-2024
Vulnerability summary
CVE-2011-1218 is a high (CVSS 9.3) vulnerability in ibm lotus_notes. EPSS estimates a 5.09% chance of exploitation in the next 30 days, higher than 92.2% of scored vulnerabilities.
CVSS score
9.3/10
010
High · v2.0 (NVD)EPSS score
5.09%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 31-05-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information.
CVSS metrics
1 score · 1 source · 1 versionHigh 9.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
5.09%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.09% on 20-09-2026
20-09-202620-10-2026
EPSS score5.09%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm1 product
- lotus_notes≤ 8.5.2.2 | 3.0 | 3.0.0.1 | 3.0.0.2 | 4.2 | 4.2.1 | 4.2.2 | 4.5 | 4.6 | 4.6.7a | 4.6.7h | 5.0 | 5.0.1 | 5.0.1.02 | 5.0.1a | 5.0.1b | 5.0.1c | 5.0.2 | 5.0.2a | 5.0.2b | 5.0.2c | 5.0.3 | 5.0.4 | 5.0.4a | 5.0.5 | 5.0.5.01 | 5.0.5.02 | 5.0.6 | 5.0.6a | 5.0.6a.01 | 5.0.7 | 5.0.7a | 5.0.8 | 5.0.9 | 5.0.9a | 5.0.10 | 5.0.11 | 5.0.12 | 5.0a | 6.0 | 6.0.1 | 6.0.1:cf1 | 6.0.1:cf2 | 6.0.1:cf3 | 6.0.2 | 6.0.2:cf1 | 6.0.2:cf2 | 6.0.2.2 | 6.0.3 | 6.0.4 | 6.0.5 | 6.5 | 6.5.1 | 6.5.2 | 6.5.3 | 6.5.3.1 | 6.5.4 | 6.5.4.1 | 6.5.4.2 | 6.5.4.3 | 6.5.5 | 6.5.5.1 | 6.5.5.2 | 6.5.5.3 | 6.5.6 | 6.5.6.1 | 6.5.6.2 | 6.5.6.3 | 7.0 | 7.0.0 | 7.0.1 | 7.0.1.1 | 7.0.2 | 7.0.2.1 | 7.0.2.2 | 7.0.2.3 | 7.0.3 | 7.0.3.1 | 7.0.4 | 7.0.4.0 | 7.0.4.1 | 7.0.4.2 | 8.0 | 8.0.0 | 8.0.1 | 8.0.2 | 8.0.2.0 | 8.0.2.1 | 8.0.2.2 | 8.0.2.3 | 8.0.2.4 | 8.0.2.5 | 8.0.2.6 | 8.5 | 8.5.0.0 | 8.5.0.1 | 8.5.1 | 8.5.1.0 | 8.5.1.1 | 8.5.1.2 | 8.5.1.3 | 8.5.1.4 | 8.5.1.5 | 8.5.2.0 | 8.5.2.1
1 vendor · 1 product
References
5 links- www.ibm.com/support/docview.wss?uid=swg21500034X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14238VDB EntrySignatureX Refsource OVAL