CVE-2007-5406 kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly....
HighCVSS 9.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus notes | = 6.0 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
| ibm lotus notes | = 7.0 | No fix listed |
| ibm lotus notes | = 8.0 | No fix listed |
| ibm lotus notes | = 8.0.1 | No fix listed |
| symantec mail security | <= 7.5 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| autonomy keyview | All versions | No fix listed |
References
- 27763 third-party-advisory vendor-advisory
- 28140 third-party-advisory vendor-advisory
- 28209 third-party-advisory vendor-advisory
- 28210 third-party-advisory vendor-advisory
- 29342 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- 1019805 vdb-entry
- 20080414 Secunia Research: Lotus Notes Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: Autonomy Keyview Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: Symantec Mail Security Applix Graphics ParsingVulnerabilities mailing-list
- 20080414 Secunia Research: activePDF DocConverter Applix Graphics ParsingVulnerabilities mailing-list
- 28454 vdb-entry
- 1019844 vdb-entry
- ADV-2008-1153 vdb-entry
- ADV-2008-1154 vdb-entry
- ADV-2008-1156 vdb-entry
- autonomy-keyview-applix-dos(41722) vdb-entry