CVE-2016-0278

moderate-risk

Published 2016-06-26

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301.

Do I need to act?

1.9% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (20)

Domino

Affected Vendors

Ibm

References (6)

Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21983292

http://www.securitytracker.com/id/1036091

http://www.talosintelligence.com/reports/TALOS-2016-0090/

Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21983292

http://www.securitytracker.com/id/1036091

http://www.talosintelligence.com/reports/TALOS-2016-0090/

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 5/34 · Minimal

Exposure 20/34 · Moderate