CVE-2007-5405 Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF Doc...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf docconverter | = 3.8.2_.5 | No fix listed |
| activepdf docconverter | = 3.8.4.0 | No fix listed |
| autonomy keyview | = 2.0.0.2 | No fix listed |
| autonomy keyview | = 10.3.0.0 | No fix listed |
| ibm lotus notes | = 6.0 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
| ibm lotus notes | = 7.0 | No fix listed |
| ibm lotus notes | = 7.0.2 | No fix listed |
| ibm lotus notes | = 7.0.3 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| symantec mail security | = 7.5 | No fix listed |
| symantec mail security appliance | = 5.0 | No fix listed |
References
- 27763 third-party-advisory vendor-advisory
- 28140 third-party-advisory vendor-advisory
- 28209 third-party-advisory vendor-advisory
- 28210 third-party-advisory vendor-advisory
- 29342 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- 1019805 vdb-entry
- www-1.ibm.com
- 20080414 Secunia Research: Lotus Notes Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: Autonomy Keyview Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: Symantec Mail Security Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: activePDF DocConverter Applix Graphics ParsingVulnerabilities mailing-list
- 28454 vdb-entry
- 1019844 vdb-entry
- www.symantec.com
- ADV-2008-1153 vdb-entry
- ADV-2008-1154 vdb-entry
- ADV-2008-1156 vdb-entry
- autonomy-keyview-applix-multiple-bo(41721) vdb-entry