CVE-2015-5040: IBM Domino

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than CVE-2015-4994.

Affected products

• IBM Domino: version 8.5.0 only; version 8.5.0.1 only; version 8.5.1 only; version 8.5.1.1 only; version 8.5.1.2 only; version 8.5.1.3 only; …

Published 2015-10-29. Last modified 2026-06-17.