CVE-2010-1608: IBM Lotus Notes

High severity, CVSS 10.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected products

• IBM Lotus Notes: version 8.5 only; version 8.5.1 only; version 8.5.1.1 only

Published 2010-04-29. Last modified 2026-06-16.