CVE-2017-1711

Published: Feb 13, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532.

Affected (10)

Products: Ibm: Notes, Client Application Access

Ibm

2 products

Notes

Client Application Access

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Notes	Version 8.5.0.0
Ibm Notes	Version 8.5.1.0
Ibm Notes	Version 8.5.2.0
Ibm Notes	Version 8.5.3.0
Ibm Notes	Version 9.0.0.0
Ibm Notes	Version 9.0.1.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Client Application Access	Version 1.0.1.0
Ibm Client Application Access	Version 1.0.1.1
Ibm Client Application Access	Version 1.0.1.1 interim_fix_1
Ibm Client Application Access	Version 1.0.1.2 interim_fix_1