CVE-2011-1215
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8...
CVE-2011-1215 is a high vulnerability (CVSS 9.3) in Ibm Lotus Notes, published May 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.54%, the 92nd percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 5.54%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
Exploit likelihood
Affected products
What each source reports
NVD Score used 9.3
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
- Record
CVE-2011-1215- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
- Record
CVE-2011-1215- Updated
- 2026-11-02
EUVDEUVD-2011-1223No score
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
- Record
EUVD-2011-1223- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6ppq-4rfm-mh88No score
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8...
Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.
- Record
GHSA-6ppq-4rfm-mh88- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
ibm.com/support/docview.wss?uid=swg21500034
securityfocus.com/bid/47962
secunia.com/advisories/44624
exchange.xforce.ibmcloud.com/vulnerabilities/67622
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14650
labs.idefense.com/intelligence/vulnerabilities/display.php?id=906
nvd.nist.gov/vuln/detail/CVE-2011-1215
github.com/advisories/GHSA-6ppq-4rfm-mh88