CVE-2008-1965
- State
- Published
- Severity
- Not scored
- Published
- Apr 25, 2008
- Updated
- Aug 7, 2024
- Reserved
- Apr 25, 2008
Description
Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 28926vdb-entry
- 1019952vdb-entry
- ADV-2008-1394vdb-entry
- 20080424 Lotus expeditor rcplauncher uri handler vulnerabilitymailing-list
- 1019951vdb-entry
- ibm-lotussymphony-rcplauncher-code-execution(41990)vdb-entry
- 29958third-party-advisory
- http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability
- 20080425 Lotus expeditor rcplauncher uri handler vulnerabilitymailing-list
- http://www-1.ibm.com/support/docview.wss?uid=swg21303813
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.