CVE-2004-2280

Description

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.

Affected products

• ibm / lotus_notes6.0 – 6.0
• ibm / lotus_notes6.0.1 – 6.0.1
• ibm / lotus_notes6.0.2 – 6.0.2
• ibm / lotus_notes6.0.3 – 6.0.3
• ibm / lotus_notes6.0.4 – 6.0.4
• ibm / lotus_notes6.0.5 – 6.0.5
• ibm / lotus_notes6.5 – 6.5
• ibm / lotus_notes6.5.1 – 6.5.1
• ibm / lotus_notes6.5.2 – 6.5.2
• ibm / lotus_notes6.5.3 – 6.5.3

Exploits & proofs of concept

• exploit-dbIBM Lotus Notes 6.0/6.5 - Multiple Java Applet Vulnerabilitiesby Jouko Pynnonen

References

• MISChttp://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en
• MISChttp://www.securityfocus.com/bid/10704
• VENDOR_ADVISORYhttp://secunia.com/advisories/12046
• MISChttp://www.osvdb.org/8418