NetSight
critical9.3

CVE-2007-5405

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, …

Impact

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.

Affected products

VendorProductAffected versions
ActivepdfDocconverter
Versions 3.8.2_.5, 3.8.4.0
AutonomyKeyview
Versions 2.0.0.2, 10.3.0.0
IbmLotus Notes
Versions 6.0, 6.5, 7.0, 7.0.2, 7.0.3
SymantecMail Security
Versions 5.0, 5.0.0, 5.0.1, 7.5
SymantecMail Security Appliance
Version 5.0

Weakness classification

References