Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Lotus expeditor rcplauncher uri handler vulnerability Apr 25 2008 03:04PM
Thomas Pollet (thomas pollet gmail com)
Hello

Lotus expeditor rcplauncher registers a cai: uri handler.
This handler executes
"D:\Program Files\IBM\Lotus\Symphony\framework\rcp\rcplauncher.exe"
-config notes -com.ibm.rcp.portal.app.ui#openCA "%1"
the rcplauncher process accepts various arguments which can be abused
to execute arbitrary ...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus