CVE-2007-5544

7.8 highEPSS 0.3%

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2007-10-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_domino
ibm:lotus_notes

References

http://secunia.com/advisories/27321
http://www-1.ibm.com/support/docview.wss?uid=swg21257030
http://www.securityfocus.com/bid/26146
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-013.txt
http://www.vupen.com/english/advisories/2007/3598

Check your stack JSON