RULE(RULE ID:322094)

Rule General Information
Release Date: 2019-06-27
Rule Name: IBM Lotus iNotes ActiveX Control Attach_Times Buffer Overflow Vulnerability (CVE-2012-2175)
Severity:
CVE ID:
Rule Protection Details
Description: Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: http://www.ibm.com/support/docview.wss?uid=swg21596862
https://exchange.xforce.ibmcloud.com/vulnerabilities/75321
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://www-01.ibm.com/support/docview.wss?uid=swg21596862