Unscored severity · published Apr 10, 2008
CVE-2007-5399
Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long (1) To, (2) Cc, (3) Bcc, (4) From, (5) Date, (6) Subject, (7) Priority, (8) Importance, or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header, related to creation of an associated filename.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyview · Autonomy
10.3.0.0 · source: NVD
LN
Lotus Notes · Ibm
6.0; 6.5; 7.0; 7.0.2; 7.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5399
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5399
Vendor Advisory
http://secunia.com/advisories/28209
Vendor Advisory
http://secunia.com/advisories/28210
Vendor Advisory
http://secunia.com/secunia_research/2007-91/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2007-92/advisory/
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
www.securityfocus.com
http://www.securityfocus.com/archive/1/490832/100/0/threaded
More from Keyview
–
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF…
–
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment,…
–
CVE-2009-3037
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec…
–
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2008-0066
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to…