Unscored severity · published Apr 10, 2008
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Docconverter · Activepdf
3.8.4.0 · source: NVD
KE
Keyview · Autonomy
2.0.0.2; 10.3.0.0 · source: NVD
LN
Lotus Notes · Ibm
6.0; 6.5; 7.0; 7.0.2; 7.0.3 · source: NVD
MS
Mail Security · Symantec
5.0; 5.0.0; 5.0.1; 7.5 · source: NVD
MS
Mail Security Appliance · Symantec
5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6020
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6020
Vendor Advisory
http://secunia.com/advisories/27763
Vendor Advisory
http://secunia.com/advisories/28140
Vendor Advisory
http://secunia.com/advisories/28209
Vendor Advisory
http://secunia.com/advisories/28210
Vendor Advisory
http://secunia.com/advisories/29342
Vendor Advisory
http://secunia.com/secunia_research/2007-104/advisory/
More from Docconverter
–
CVE-2007-5405
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2007-5909
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes…
–
CVE-2007-5910
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes…