Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-5405
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-5405

Description:
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/41721

ST
  1019805
  1019844

SAID
  Secunia Advisory: SA27763
  Secunia Advisory: SA28140
  Secunia Advisory: SA28209
  Secunia Advisory: SA28210
  Secunia Advisory: SA29342

MISC
  http://secunia.com/secunia_research/2007-98/advisory/
  http://secunia.com/secunia_research/2007-97/advisory/
  http://secunia.com/secunia_research/2007-96/advisory/
  http://secunia.com/secunia_research/2007-95/advisory/

CONFIRM
  http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
  http://www.symantec.com/avcenter/security/Content/2008.04.08e.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/490839/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/490838/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/490825/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/490837/100/0/threaded

BID
  28454


Return to the previous page.