CVE-2011-1213: IBM Lotus Notes

High severity, CVSS 9.3. EPSS: 33% chance of exploitation in the next 30 days.

Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.

Affected products

• IBM Lotus Notes: up to and including 8.5.2.2; version 3.0 only; version 3.0.0.1 only; version 3.0.0.2 only; version 4.2 only; version 4.2.1 only; …

Published 2011-05-31. Last modified 2026-06-16.