CVE-2011-0912

Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.

• CWE-20

• http://secunia.com/advisories/43222Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21461514Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0295Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-11-051/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14348
• http://secunia.com/advisories/43222Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21461514Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0295Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-11-051/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14348

Published

Feb 8, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0904The rfbSendFramebufferUpdate function in server/libvncserver…
• CVE-2011-0905The rfbSendFramebufferUpdate function in server/libvncserver…
• CVE-2011-0908Open redirect vulnerability in Vanilla Forums before 2.0.17.…
• CVE-2011-0909Cross-site scripting (XSS) vulnerability in Vanilla Forums b…
• CVE-2011-0910The cookie implementation in Vanilla Forums before 2.0.17.6 …
• CVE-2011-0911Cross-site scripting (XSS) vulnerability in the Users module…
• CVE-2011-0913Stack-based buffer overflow in ndiiop.exe in the DIIOP imple…
• CVE-2011-0914Integer signedness error in ndiiop.exe in the DIIOP implemen…
• CVE-2011-0915Stack-based buffer overflow in nrouter.exe in IBM Lotus Domi…
• CVE-2011-0916Stack-based buffer overflow in the SMTP service in IBM Lotus…
• CVE-2011-0917Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remo…
• CVE-2011-0918Stack-based buffer overflow in the NRouter (aka Router) serv…