Login Request a demo
Unscored severity · published Apr 10, 2008
CVE-2007-5406
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF…
–
CVSS
3%
EPSS
No
On KEV
Description
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyview · Autonomy
All versions, or not specified · source: NVD
LN
Lotus Notes · Ibm
6.0; 6.5; 7.0; 8.0; 8.0.1 · source: NVD
MS
Mail Security · Symantec
through 7.5; 5.0; 5.0; 5.0.0; 5.0.1 · source: NVD
Affected product
KE
Keyview
Autonomy
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5406
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5406
Vendor Advisory
http://secunia.com/advisories/27763
Vendor Advisory
http://secunia.com/advisories/28140
Vendor Advisory
http://secunia.com/advisories/28209
Vendor Advisory
http://secunia.com/advisories/28210
Vendor Advisory
http://secunia.com/advisories/29342
Vendor Advisory
http://secunia.com/secunia_research/2007-95/advisory/
More from Keyview
–
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF…
–
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment,…
–
CVE-2009-3037
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec…
–
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2008-0066
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to…