CVE-2007-4474

no score yetEPSS 44%

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.

EPSS: 44% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2007-12-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:domino_web_access
ibm:lotus_domino_web_access

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html
http://osvdb.org/40954
http://secunia.com/advisories/28184
http://www.kb.cert.org/vuls/id/963889
http://www.securityfocus.com/bid/26972

Check your stack JSON