CyberSec.Space Logo
Back to CVE Browser

CVE-2001-0130

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0970%
EPSS Percentile5.88th
PublishedMar 12, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.

Affected Platforms (CPE)

📦
Lotus

Domino R5 Client

= 5.04
📦
Lotus

Domino R5 Client

= 5.05
📦
Lotus

Domino R5 Server

= 5.04
📦
Lotus

Domino R5 Server

= 5.05
📦
Lotus

Domino R5 Server

= 5.06

References & Advisories

🔗 http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6207
🔗 http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6207

Related Vulnerabilities

CVE-2011-151910.0

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC s...

CVE-2011-091410.0

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote at...

CVE-2001-11617.5

Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via ...

CVE-2006-47637.5

IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon l...