CVE-2011-0918: IBM Lotus Domino

High severity, CVSS 10.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE.

Affected products

• IBM Lotus Domino: any version

Published 2011-02-08. Last modified 2026-06-16.