cve/2011/CVE-2011-1512.md

CVE-2011-1512

Description

Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.

POC

Reference

• http://securityreason.com/securityalert/8263
• http://www.coresecurity.com/content/LotusNotes-XLS-viewer-heap-overflow

Github

No PoCs found on GitHub currently.