CVE-2007-5909

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
25.9%
top 3.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Autonomy Keyview Export SDKAutonomy Keyview Filter SDKAutonomy Keyview Viewer SDK+3 more
Timeline
PublishedNov 10
Latest updateMay 1

Description

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE…

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages6 packages

▶NVDibm/lotus_notes7.0.2
▶NVDsymantec/mail_security5 versions+4

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5m3m-cp9q-wr3m: Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9↗2022-05-01
▶
CVEList
CVE-2007-5909: Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9↗2007-11-10
▶
CVE-2007-5909 (CRITICAL CVSS 9.3) | Multiple stack-based buffer overflo | cvebase.io