CVEvulnerability

CVE-2007-6020

9.3 HIGH Published 2008-04-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.

Affected configurations

• activepdf docconverter 3.8.4.0 • autonomy keyview 2.0.0.2 • autonomy keyview 10.3.0.0 • ibm lotus notes 6.0 • ibm lotus notes 6.5 • ibm lotus notes 7.0 • ibm lotus notes 7.0.2 • ibm lotus notes 7.0.3 • symantec mail security 5.0 • symantec mail security 5.0.0 • symantec mail security 5.0.1 • symantec mail security 7.5 • symantec mail security appliance 5.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References