What’s Vulnerable › Vulnerabilities
CVE-2009-3038
- Severity: medium (CVSS 4.3 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-09-01 · updated 2026-06-16
Description
A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid attribute of an OBJECT element.
Affected products
- IBM Lotus Notes Connector: all versions
References
Get alerted when CVE-2009-3038 or the next vulnerability affects your stack