CVE Vulnerability

CVE-2007-5909

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

9.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www.securityfocus.com/archive/1/482664
http://vuln.sg/lotusnotes702-en.html
http://vuln.sg/lotusnotes702doc-en.html
http://vuln.sg/lotusnotes702mif-en.html
http://vuln.sg/lotusnotes702sam-en.html
http://www.zerodayinitiative.com/advisories/ZDI-07-059.html
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21272836
http://www.securityfocus.com/bid/26175 Patch
http://securitytracker.com/id?1018853
http://securitytracker.com/id?1018886
http://secunia.com/advisories/27304 Patch Vendor Advisory
http://securityreason.com/securityalert/3357
http://www.vupen.com/english/advisories/2007/3697
http://www.vupen.com/english/advisories/2007/3596
http://www.securityfocus.com/archive/1/483102/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*
cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*
cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*
cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:5.0:*:appliance:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*
Information

Published : 2007-11-10 02:46

Updated : 2018-10-15 09:47

NVD link : CVE-2007-5909

Mitre link : CVE-2007-5909

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer