Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0066

Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with (1) "large chunks of data," or a long URL in the (2) BACKGROUND attribute of a BODY element or (3) SRC attribute of an IMG element.

Published

2008-04-10T18:05:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	autonomy	keyview	*	Yes
Application	ibm	lotus_notes	7.0.2	Yes
Application	ibm	lotus_notes	7.0.3	Yes

References

http://secunia.com/advisories/28140 Vendor Advisory ([email protected])
http://secunia.com/advisories/28209 Vendor Advisory ([email protected])
http://secunia.com/advisories/28210 Vendor Advisory ([email protected])
http://secunia.com/secunia_research/2008-3/advisory/ Vendor Advisory ([email protected])
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 ([email protected])
http://www.securityfocus.com/archive/1/490828/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/28454 ([email protected])
http://www.securitytracker.com/id?1019843 ([email protected])
http://www.vupen.com/english/advisories/2008/1153 ([email protected])
http://www.vupen.com/english/advisories/2008/1156 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41724 ([email protected])
http://secunia.com/advisories/28140 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28209 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28210 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/secunia_research/2008-3/advisory/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/490828/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28454 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019843 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1153 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1156 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41724 (af854a3a-2127-422b-91ae-364da2661108)