VDB
CVE-2007-4474
CVE-2007-4474
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
EPSS 87.30% · 99.5th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
87.30%
99.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| ibm | lotus_domino_web_access | 7.0.1, 7.0.34.1 |
| ibm | domino_web_access | 6.0, 6.0.1, 6.0.1.1 |
Timeline
- Dec 27, 2007 CVE Published
- Dec 30, 2007 PoC Published
- Feb 13, 2008 PoC Published
- Sep 20, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
References
- 1019138 vdb
- 5111 exploit
- 26972 vdb
- 20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption mailing-list
- domino-dwa7w-bo(39175) vdb
- 4820 exploit
- VU#963889 third-party-advisory
- ADV-2007-4296 vdb
- 28184 third-party-advisory
- 4818 exploit
- 40954 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2007-4474 advisory