CVE-2008-2240: IBM Lotus Domino

High severity, CVSS 10.0. EPSS: 64.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.

Affected products

• IBM Lotus Domino: version 6.0 only; version 6.5 only; version 7.0 only; version 8.0 only; version 8.0.1 only

Published 2008-05-22. Last modified 2026-06-16.