CVE-2011-1512
N/A
Published: May 31, 2011 at 08:00 PM UTC
Updated: June 16, 2026 at 11:29 PM UTC
2 products affected across 2 vendorsLotus NotesKeyview
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
All versions
v ≤ 8.5.2.23.03.0.0.13.0.0.24.24.2.14.2.24.54.64.6.7a4.6.7h5.05.0.15.0.1.025.0.105.0.115.0.125.0.1a5.0.1b5.0.1c5.0.25.0.2a5.0.2b5.0.2c5.0.35.0.45.0.4a5.0.55.0.5.015.0.5.025.0.65.0.6a5.0.6a.015.0.75.0.7a5.0.85.0.95.0.9a5.025.0a6.06.0.16.0.1 cf16.0.1 cf26.0.1 cf36.0.26.0.2 cf16.0.2 cf26.0.2.26.0.36.0.46.0.56.56.5.16.5.26.5.36.5.3.16.5.46.5.4.16.5.4.26.5.4.36.5.56.5.5.16.5.5.26.5.5.36.5.66.5.6.16.5.6.26.5.6.37.07.0.07.0.17.0.1.17.0.27.0.2.17.0.2.27.0.2.37.0.37.0.3.17.0.47.0.4.07.0.4.17.0.4.28.08.0.08.0.18.0.28.0.2.08.0.2.18.0.2.28.0.2.38.0.2.48.0.2.58.0.2.68.58.5.0.08.5.0.18.5.18.5.1.08.5.1.18.5.1.28.5.1.38.5.1.48.5.1.58.5.2.08.5.2.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (8)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/44624Third Party Advisoryx_refsource_SREASON
Source: [email protected]
http://securityreason.com/securityalert/8263x_refsource_MISCExploit
Source: [email protected]
http://www.coresecurity.com/content/LotusNotes-XLS-viewer-heap-overflowMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/518120/100/0/threadedVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/67619VDB EntrySignaturex_refsource_OVAL
Source: [email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14203Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card