CVE-2007-6706
UnknownEPSS 3.47%
Last modified
CVE-2007-6706 is a vulnerability of currently unknown severity. Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.. EPSS estimates a 3.47% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Lotus Notes | <= 7.0.2 |
| Ibm | Lotus Notes | 6.5 |
| Ibm | Lotus Notes | 8.0 |
References
- http://secunia.com/advisories/27279Vendor Advisory
- http://secunia.com/advisories/27279Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6706?
Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP.
How severe is CVE-2007-6706?
Severity scoring for CVE-2007-6706 is pending analysis. The EPSS model estimates a 3.47% probability of exploitation in the next 30 days.
How do I fix CVE-2007-6706?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-6700Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in…
- CVE-2007-6701Multiple stack-based buffer overflows in the Spooler service…
- CVE-2007-6702goform/QuickStart_c0 on the GoAhead Web Server on the FS4104…
- CVE-2007-6703Unspecified vulnerability in vdccm before 0.10.1 in SynCE (S…
- CVE-2007-6704Multiple cross-site scripting (XSS) vulnerabilities in F5 Fi…
- CVE-2007-6705The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1…
- CVE-2007-6707Multiple cross-site scripting (XSS) vulnerabilities on the C…
- CVE-2007-6708Multiple cross-site request forgery (CSRF) vulnerabilities o…
- CVE-2007-6709The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.…
- CVE-2007-6711Unspecified vulnerability in customer.php in FreeWebshop.org…
- CVE-2007-6712Integer overflow in the hrtimer_forward function (hrtimer.c)…
- CVE-2007-6713Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 ha…
Are you affected by CVE-2007-6706?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST