VYPR
← All advisories
Unrated severityNVD Advisory· Published May 10, 2013· Updated Apr 29, 2026

CVE-2013-2977

CVE-2013-2977

Description

Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q.

Affected products

21
  • IBM/Lotus Notes20 versions
    cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*+ 19 more
    • cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:8.5.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_notes:9.0.0.0:*:*:*:*:*:*:*
  • IBM/Notesllm-fuzzy
    Range: >= 8.5.0, <= 8.5.3 FP4 + Interim Fix 1; >= 9.0, <= 9.0 Interim Fix 1 (Windows); >= 8.5.0, <= 8.5.3 FP5; >= 9.0, <= 9.0.1 (Linux)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.