Search/CVE-2007-4222
● CVE

CVE-2007-4222

VendoribmProductlotus notesDiscoveredOct 29, 2007UpdatedApr 23, 2026

Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.

CVSS v3.1
—
EPSS
4.09%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 29, 2007
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026