CVE-2007-5909

Currently unrated

Key Information:

Vendor
Symantec
Status
Mail Security
Lotus Notes
Keyview Viewer Sdk
Docconverter
Vendor
CVE Published:
10 November 2007

Summary

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

References

http://securityreason.com/securityalert/3357
third-party-advisoryx_refsource_SREASON
http://www.zerodayinitiative.com/advisories/ZDI-07-059.html
x_refsource_MISC
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21...
x_refsource_CONFIRM

EPSS Score

53% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.