CVE-2007-5910 Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3,....
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf docconverter | = 3.8.2_.5 | No fix listed |
| autonomy keyview export sdk | <= 9.2.0 | No fix listed |
| autonomy keyview filter sdk | <= 9.2.0 | No fix listed |
| autonomy keyview viewer sdk | <= 9.2.0 | No fix listed |
| ibm lotus notes | <= 7.0.2 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0 | No fix listed |
| symantec mail security | = 5.0.0.24 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| symantec mail security | = 7.5 | No fix listed |
References
- 27304 patch third-party-advisory vendor-advisory
- 3357 third-party-advisory
- securityresponse.symantec.com
- 1018853 vdb-entry
- 1018886 vdb-entry
- vuln.sg
- vuln.sg
- www-1.ibm.com
- 20071023 [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities mailing-list
- 26175 vdb-entry
- ADV-2007-3596 vdb-entry
- ADV-2007-3697 vdb-entry