CVE-2007-5405 : Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Pres

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.

Published 2008-04-10 18:05:00

Updated 2018-10-15 21:44:32

Source Flexera Software LLC

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2007-5405

IBM » Lotus Notes » Version: 6.5
cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*
Matching versions
IBM » Lotus Notes » Version: 6.0
cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*
Matching versions
IBM » Lotus Notes » Version: 7.0
cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*
Matching versions
IBM » Lotus Notes » Version: 7.0.2
cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*
Matching versions
IBM » Lotus Notes » Version: 7.0.3
cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0.1 Smtp Edition
cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0 Microsoft Exchange Edition
cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0.0 Smtp Edition
cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 7.5 Domino Edition
cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*
Matching versions
Symantec » Mail Security Appliance » Version: 5.0
cpe:2.3:a:symantec:mail_security_appliance:5.0:*:*:*:*:*:*:*
Matching versions
Autonomy » Keyview » Version: 10.3.0.0
cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:*
Matching versions
Autonomy » Keyview » Version: 2.0.0.2
cpe:2.3:a:autonomy:keyview:2.0.0.2:*:*:*:*:*:*:*
Matching versions
Activepdf » Docconverter » Version: 3.8.2 .5
cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*
Matching versions
Activepdf » Docconverter » Version: 3.8.4.0
cpe:2.3:a:activepdf:docconverter:3.8.4.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5405

EPSS FAQ

78.27%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5405

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-5405

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5405

Jump to

Vulnerability Details : CVE-2007-5405

Products affected by CVE-2007-5405

Exploit prediction scoring system (EPSS) score for CVE-2007-5405

CVSS scores for CVE-2007-5405

CWE ids for CVE-2007-5405

References for CVE-2007-5405