CVE-2007-6020 Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activeP...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf docconverter | = 3.8.4.0 | No fix listed |
| autonomy keyview | = 2.0.0.2 | No fix listed |
| autonomy keyview | = 10.3.0.0 | No fix listed |
| ibm lotus notes | = 6.0 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
| ibm lotus notes | = 7.0 | No fix listed |
| ibm lotus notes | = 7.0.2 | No fix listed |
| ibm lotus notes | = 7.0.3 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| symantec mail security | = 7.5 | No fix listed |
| symantec mail security appliance | = 5.0 | No fix listed |
References
- 27763 third-party-advisory vendor-advisory
- 28140 third-party-advisory vendor-advisory
- 28209 third-party-advisory vendor-advisory
- 28210 third-party-advisory vendor-advisory
- 29342 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- 1019805 vdb-entry
- www-1.ibm.com vendor-advisory
- 20080414 Secunia Research: activePDF DocConverter Folio Flat File ParsingBuffer Overflows mailing-list
- 20080414 Secunia Research: Autonomy Keyview Folio Flat File Parsing BufferOverflows mailing-list
- 20080414 Secunia Research: Symantec Mail Security Folio Flat File ParsingBuffer Overflows mailing-list
- 20080414 Secunia Research: Lotus Notes Folio Flat File Parsing BufferOverflows mailing-list
- 28454 vdb-entry
- 1019841 vdb-entry
- www.symantec.com
- ADV-2008-1153 vdb-entry
- ADV-2008-1154 vdb-entry
- ADV-2008-1156 vdb-entry
- autonomy-keyview-foliosr-bo(41716) vdb-entry