CVE-2011-0915

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 8.5.3

Description The issue is related to a stack-based buffer overflow in the nrouter.exe component, which can be triggered by a remote attacker sending a malformed Notes calendar meeting request with a long name parameter in the Content-Type header. This can lead to the execution of arbitrary code.

Recommendations For versions prior to 8.5.3, update to version 8.5.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the nrouter.exe component to minimize the risk of exploitation. Avoid using the name parameter in the Content-Type header of iCalendar meeting requests until the issue is resolved.