CVE-2017-1274

CVE-2017-1274 describes a high-severity stack-based buffer overflow vulnerability affecting the IMAP service in IBM Domino versions 8.5.3 and 9.0. An authenticated attacker can exploit this by providing an excessively long mailbox name, potentially leading to arbitrary code execution. The vulnerability carries a CVSS v3.0 score of 8.8 (High), indicating a network-based attack with low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (NSA's EMPHASISMINE) is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.