CVEvulnerability

CVE-2007-5405

9.3 HIGH Published 2008-04-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.

Affected configurations

• activepdf docconverter 3.8.2 .5 • activepdf docconverter 3.8.4.0 • autonomy keyview 2.0.0.2 • autonomy keyview 10.3.0.0 • ibm lotus notes 6.0 • ibm lotus notes 6.5 • ibm lotus notes 7.0 • ibm lotus notes 7.0.2 • ibm lotus notes 7.0.3 • symantec mail security 5.0 • symantec mail security 5.0.0 • symantec mail security 5.0.1 • symantec mail security 7.5 • symantec mail security appliance 5.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References