Intrusion Prevention

IBM.Lotus.Notes.Attachment.Viewer.Code.Execution

Description

This indicates an attack attempt to exploit a buffer-overflow vulnerability in IBM Lotus Notes.
The vulnerability is caused by an error that occurs when the vulnerable
software handles a crafted .WPD, .SAM, .MIF, or .DOC file. A remote attacker may exploit this to execute arbitrary code via a crafted mail attachment.

Affected Products

IBM Lotus Notes 7.0.2

Impact

System Compromise: Remote attackers can gain control of the vulnerable system.

Recommended Actions

Apply the patch supplied by the vendor.

CVE References

CVE-2007-5544 CVE-2007-5909