CVE-2011-1214
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8...
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
- Record
CVE-2011-1214- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
- Record
CVE-2011-1214- Updated
- 2026-11-02
EUVDEUVD-2011-1222 No score
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
- Record
EUVD-2011-1222- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvjx-3cwq-jm8m No score
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8...
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
- Record
GHSA-fvjx-3cwq-jm8m- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1214 is a high vulnerability (CVSS 9.3) in Ibm Lotus Notes, published May 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.54%, the 92nd percentile. No source names a fixed version.
References
ibm.com/support/docview.wss?uid=swg21500034
securityfocus.com/bid/47962
secunia.com/advisories/44624
labs.idefense.com/intelligence/vulnerabilities/display.php?id=905
exchange.xforce.ibmcloud.com/vulnerabilities/67621
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14309
nvd.nist.gov/vuln/detail/CVE-2011-1214
github.com/advisories/GHSA-fvjx-3cwq-jm8m