Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5910

Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.

Published

2007-11-10T02:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application activepdf docconverter 3.8.2_.5 Yes
Application autonomy keyview_export_sdk ≤ 9.2.0 Yes
Application autonomy keyview_filter_sdk ≤ 9.2.0 Yes
Application autonomy keyview_viewer_sdk ≤ 9.2.0 Yes
Application ibm lotus_notes ≤ 7.0.2 Yes
Application symantec mail_security 5.0 Yes
Application symantec mail_security 5.0 Yes
Application symantec mail_security 5.0.0 Yes
Application symantec mail_security 5.0.0.24 Yes
Application symantec mail_security 5.0.1 Yes
Application symantec mail_security 7.5 Yes
References