Unscored severity · published Nov 10, 2007
CVE-2007-5909
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes…
–
CVSS
20.9%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.
Exploitation
Is it being used?
Exploit prediction (EPSS)20.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Docconverter · Activepdf
3.8.2_.5 · source: NVD
KE
Keyview Export Sdk · Autonomy
through 9.2.0 · source: NVD
KF
Keyview Filter Sdk · Autonomy
through 9.2.0 · source: NVD
KV
Keyview Viewer Sdk · Autonomy
through 9.2.0 · source: NVD
LN
Lotus Notes · Ibm
through 7.0.2 · source: NVD
MS
Mail Security · Symantec
5.0; 5.0; 5.0.0; 5.0.0.24; 5.0.1; 7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5909
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5909
Patch
http://secunia.com/advisories/27304
securityreason.com
http://securityreason.com/securityalert/3357
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html
securitytracker.com
http://securitytracker.com/id?1018853
securitytracker.com
http://securitytracker.com/id?1018886
vuln.sg
http://vuln.sg/lotusnotes702-en.html
More from Docconverter
–
CVE-2007-5405
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2007-5910
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes…