Vulnerability Details : CVE-2012-2174
Public exploit exists!
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.
Vulnerability category: Execute code
Products affected by CVE-2012-2174
- cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2174
96.70%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2012-2174
-
IBM Lotus Notes Client URL Handler Command Injection
Disclosure Date: 2012-06-18First seen: 2020-04-26exploit/windows/browser/notes_handler_cmdinjectThis module exploits a command injection vulnerability in the URL handler for for the IBM Lotus Notes Client <= 8.5.3. The registered handler can be abused with a specially crafted notes:// URL to execute arbitrary commands with also arbitrary arguments. This
CVSS scores for CVE-2012-2174
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2012-2174
-
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2174
-
http://www.ibm.com/support/docview.wss?uid=swg21598348
IBM Security Bulletin: IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability (CVE-2012-2174)
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/75320
Lotus Notes notes:// URI command execution CVE-2012-2174 Vulnerability Report
Jump to