CVE-2011-0914: IBM Lotus Domino

High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.

Affected products

• IBM Lotus Domino: up to and including 8.5.2.2; version 4.6.1 only; version 4.6.3 only; version 4.6.4 only; version 5.0 only; version 5.0.1 only; …

Published 2011-02-08. Last modified 2026-06-16.