NetSight
IP …
critical9.3

CVE-2008-1101

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows…

Impact

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

Affected products

VendorProductAffected versions
AutonomyKeyview
Versions 2.0.0.2, 10.3.0.0
IbmLotus Notes
Versions 6.0, 6.5, 7.0, 7.0.2, 7.0.3

Weakness classification

CWE-119

References