Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-2618
HistoryFeb 15, 2006 - 12:00 a.m.

CVE-2005-2618

2006-02-1500:00:00
CWE-119
mitre
web.nvd.nist.gov
40
autonomy keyview
verity
stack-based buffer overflow
cve-2005-2618
lotus notes
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.95

Percentile

99.3%

JSON

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).

Affected configurations

Nvd
Node
autonomykeyview_export_sdk
OR
autonomykeyview_filter_sdk
OR
autonomykeyview_viewer_sdk
OR
ibmlotus_notesMatch6.0.1
OR
ibmlotus_notesMatch6.0.2
OR
ibmlotus_notesMatch6.0.3
OR
ibmlotus_notesMatch6.0.4
OR
ibmlotus_notesMatch6.0.5
OR
ibmlotus_notesMatch6.5
OR
ibmlotus_notesMatch6.5.1
OR
ibmlotus_notesMatch6.5.2
OR
ibmlotus_notesMatch6.5.3
OR
ibmlotus_notesMatch6.5.4
OR
ibmlotus_notesMatch7.0
VendorProductVersionCPE
autonomykeyview_export_sdk*cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*
autonomykeyview_filter_sdk*cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk*cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*
ibmlotus_notes6.0.1cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*
ibmlotus_notes6.0.2cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*
ibmlotus_notes6.0.3cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*
ibmlotus_notes6.0.4cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*
ibmlotus_notes6.0.5cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*
ibmlotus_notes6.5cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*
ibmlotus_notes6.5.1cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

References

Related

cert 1
saint 8
checkpoint_advisories 3
securityvulns 4
nvd 1
cvelist 1
nessus 1
cert
cert
IBM Lotus Notes ZIP file handling buffer overflow
2006-02-15 00:00:00
saint
saint
Lotus Notes HTML Speed Reader URL buffer overflow
2006-02-17 00:00:00
Lotus Notes Attachment Viewer UUE file buffer overflow
2006-02-21 00:00:00
Lotus Notes HTML Speed Reader URL buffer overflow
2006-02-17 00:00:00
checkpoint_advisories
checkpoint_advisories
IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)
2010-03-22 00:00:00
IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow - ver 2 (CVE-2005-2618)
2015-07-23 00:00:00
IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)
2010-02-25 00:00:00
securityvulns
securityvulns
Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow
2006-02-11 00:00:00
Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows
2006-02-11 00:00:00
Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow
2006-02-10 00:00:00
nvd
nvd
CVE-2005-2618
2005-12-31 05:00:00
cvelist
cvelist
CVE-2005-2618
2006-02-15 00:00:00
nessus
nessus
Lotus Notes < 6.5.5 / 7.0.1 Attachment Handling Vulnerabilities
2006-02-15 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.95

Percentile

99.3%

JSON
Related for CVE-2005-2618
cert1saint8checkpoint_advisories3securityvulns4nvd1cvelist1nessus1