KLA10202
ACE vulnerabilities in IBM Lotus Notes

An unspecified vulnerability was found in IBM products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to gcc keys. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited by remote via specially designed .xls, .zip, .prz, .rtf or Applix attachments;
2. An integer underflow can be exploited remotely via a specially designed .lzh attachement

IBM Lotus Notes versions 8.5.2.2 and earlier

Update to latest version