Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5406

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.

Published

2008-04-10T18:05:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	lotus_notes	6.0	Yes
Application	ibm	lotus_notes	6.5	Yes
Application	ibm	lotus_notes	7.0	Yes
Application	ibm	lotus_notes	8.0	Yes
Application	ibm	lotus_notes	8.0.1	Yes
Application	symantec	mail_security	≤ 7.5	Yes
Application	symantec	mail_security	5.0	Yes
Application	symantec	mail_security	5.0	Yes
Application	symantec	mail_security	5.0.0	Yes
Application	symantec	mail_security	5.0.1	Yes
Application	autonomy	keyview	*	Yes

References

http://secunia.com/advisories/27763 Vendor Advisory ([email protected])
http://secunia.com/advisories/28140 Vendor Advisory ([email protected])
http://secunia.com/advisories/28209 Vendor Advisory ([email protected])
http://secunia.com/advisories/28210 Vendor Advisory ([email protected])
http://secunia.com/advisories/29342 Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2007-95/advisory/ Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2007-96/advisory/ Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2007-97/advisory/ Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2007-98/advisory/ Vendor Advisory ([email protected])
http://securitytracker.com/id?1019805 ([email protected])
http://www.securityfocus.com/archive/1/490825/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/490837/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/490838/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/490839/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/28454 ([email protected])
http://www.securitytracker.com/id?1019844 ([email protected])
http://www.vupen.com/english/advisories/2008/1153 ([email protected])
http://www.vupen.com/english/advisories/2008/1154 ([email protected])
http://www.vupen.com/english/advisories/2008/1156 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41722 ([email protected])
http://secunia.com/advisories/27763 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28140 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28209 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28210 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29342 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2007-95/advisory/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2007-96/advisory/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2007-97/advisory/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2007-98/advisory/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1019805 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490825/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490837/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490838/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490839/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28454 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019844 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1153 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1154 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1156 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41722 (af854a3a-2127-422b-91ae-364da2661108)