CVE-2008-1101

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

Link	Resource
http://secunia.com/secunia_research/2008-12/advisory/	Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
http://www.securityfocus.com/bid/28454
http://secunia.com/advisories/28140	Vendor Advisory
http://secunia.com/advisories/28209	Vendor Advisory
http://secunia.com/advisories/28210	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1153
http://www.vupen.com/english/advisories/2008/1156
https://exchange.xforce.ibmcloud.com/vulnerabilities/41725
http://www.securityfocus.com/archive/1/490826/100/0/threaded

Configuration 1

cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:* cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:autonomy:keyview:2.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*

---

Published : 2008-04-10 06:05

Updated : 2018-10-11 08:29

---

NVD link : CVE-2008-1101

Mitre link : CVE-2008-1101

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer