CVEvulnerability

CVE-2008-1101

9.3 HIGH Published 2008-04-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

Affected configurations

• autonomy keyview 2.0.0.2 • autonomy keyview 10.3.0.0 • ibm lotus notes 6.0 • ibm lotus notes 6.5 • ibm lotus notes 7.0 • ibm lotus notes 7.0.2 • ibm lotus notes 7.0.3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References