CVE-2010-0919

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
http://secunia.com/advisories/38681Vendor Advisory
http://secunia.com/advisories/38744Vendor Advisory
http://secunia.com/advisories/38755Vendor Advisory
http://securitytracker.com/id?1023662
http://www-01.ibm.com/support/docview.wss?uid=swg21421808Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27018109Vendor Advisory
http://www.osvdb.org/62612
http://www.securityfocus.com/bid/38457
http://www.securityfocus.com/bid/38459
http://www.vupen.com/english/advisories/2010/0495Vendor Advisory
http://www.vupen.com/english/advisories/2010/0496Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56555
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
http://secunia.com/advisories/38681Vendor Advisory
http://secunia.com/advisories/38744Vendor Advisory
http://secunia.com/advisories/38755Vendor Advisory
http://securitytracker.com/id?1023662
http://www-01.ibm.com/support/docview.wss?uid=swg21421808Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27018109Vendor Advisory
http://www.osvdb.org/62612
http://www.securityfocus.com/bid/38457
http://www.securityfocus.com/bid/38459
http://www.vupen.com/english/advisories/2010/0495Vendor Advisory
http://www.vupen.com/english/advisories/2010/0496Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56555

Timeline

Published: Mar 3, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-09204.3Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remot CVE-2010-09216.8Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allow CVE-2010-09227.8Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failur CVE-2010-09236.9Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attack CVE-2010-09245.0cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to CVE-2010-09255.0cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a d CVE-2010-09263.5The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allow CVE-2010-09274.3Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before CVE-2010-09284.0OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for cert CVE-2010-09295.0The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat CVE-2010-09305.0The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted da CVE-2010-09315.0The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat