CVE-2011-1213

Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

32.96% chance of exploitation in the next 30 days, 98th percentile

Published

2011-05-31

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/lotus/lotusnotes_lzh.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/17448

References

• CVE Record
• NVD entry

Related

• CVE-2011-1206
• CVE-2011-1220
• CVE-2011-1159
• CVE-2011-1237
• CVE-2011-1151
• CVE-2011-1248