CVE-2007-4222: IBM Lotus Notes

High severity, CVSS 9.3. EPSS: 4.1% chance of exploitation in the next 30 days.

Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.

Affected products

• IBM Lotus Notes: up to and including 7.0.2

Published 2007-10-29. Last modified 2026-06-16.