Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5909

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

Published

2007-11-10T02:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application activepdf docconverter 3.8.2_.5 Yes
Application autonomy keyview_export_sdk ≤ 9.2.0 Yes
Application autonomy keyview_filter_sdk ≤ 9.2.0 Yes
Application autonomy keyview_viewer_sdk ≤ 9.2.0 Yes
Application ibm lotus_notes ≤ 7.0.2 Yes
Application symantec mail_security 5.0 Yes
Application symantec mail_security 5.0 Yes
Application symantec mail_security 5.0.0 Yes
Application symantec mail_security 5.0.0.24 Yes
Application symantec mail_security 5.0.1 Yes
Application symantec mail_security 7.5 Yes
References