Unscored severity · published Apr 10, 2008
CVE-2008-0066
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with (1) "large chunks of data," or a long URL in the (2) BACKGROUND attribute of a BODY element or (3) SRC attribute of an IMG element.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyview · Autonomy
All versions, or not specified · source: NVD
LN
Lotus Notes · Ibm
7.0.2; 7.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0066
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0066
Vendor Advisory
http://secunia.com/advisories/28140
Vendor Advisory
http://secunia.com/advisories/28209
Vendor Advisory
http://secunia.com/advisories/28210
Vendor Advisory
http://secunia.com/secunia_research/2008-3/advisory/
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
www.securityfocus.com
http://www.securityfocus.com/archive/1/490828/100/0/threaded
More from Keyview
–
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF…
–
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment,…
–
CVE-2009-3037
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec…
–
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2007-5399
Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute…