Description
IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.
Metrics
CVSS 3.0 7.8/10
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IBM | Notes | 8.5.3.6; 8.5; 8.5.1; 8.5.1.5; 8.5.2; 8.5.2.4; 8.5.3; 9.0.1; 9.0; 8.5.0.2; 9.0.1.9 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22014198Patch, Vendor Advisory
- http://www.securityfocus.com/bid/103404Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040563Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/139563VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22014198Patch, Vendor Advisory
- http://www.securityfocus.com/bid/103404Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040563Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/139563VDB Entry, Vendor Advisory
Timeline
- Published
- Mar 14, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified