CVE-2007-5909 : Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView View

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

Published 2007-11-10 02:46:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2007-5909

IBM » Lotus Notes
Versions up to, including, (<=) 7.0.2
cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0.1 Smtp Edition
cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0 Microsoft Exchange Edition
cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0.0 Smtp Edition
cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 7.5 Domino Edition
cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0 Appliance Edition
cpe:2.3:a:symantec:mail_security:5.0:*:appliance:*:*:*:*:*
Matching versions
Symantec » Mail Security » Version: 5.0.0.24 Appliance Edition
cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:*
Matching versions
Autonomy » Keyview Export Sdk
Versions up to, including, (<=) 9.2.0
cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*
Matching versions
Autonomy » Keyview Filter Sdk
Versions up to, including, (<=) 9.2.0
cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*
Matching versions
Autonomy » Keyview Viewer Sdk
Versions up to, including, (<=) 9.2.0
cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*
Matching versions
Activepdf » Docconverter » Version: 3.8.2 .5
cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5909

EPSS FAQ

31.62%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5909

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-5909

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5909

Jump to

Vulnerability Details : CVE-2007-5909

Products affected by CVE-2007-5909

Exploit prediction scoring system (EPSS) score for CVE-2007-5909

CVSS scores for CVE-2007-5909

CWE ids for CVE-2007-5909

References for CVE-2007-5909