Lucene search

FlexeraCVE-2007-5406

HistoryApr 10, 2008 - 6:05 p.m.

CVE-2007-5406

2008-04-1018:05:00

flexera

web.nvd.nist.gov

cve-2007-5406

kpagrdr.dll

autonomy

verity

keyview

ibm lotus notes

symantec mail security

activepdf docconverter

denial of service

cpu

memory consumption

crafted file

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.334

Percentile

97.1%

JSON

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.

Affected configurations

Nvd

Node

ibmlotus_notesMatch6.0

ibmlotus_notesMatch6.5

ibmlotus_notesMatch7.0

ibmlotus_notesMatch8.0

ibmlotus_notesMatch8.0.1

symantecmail_securityRange≤7.5domino

symantecmail_securityMatch5.0

symantecmail_securityMatch5.0microsoft_exchange

symantecmail_securityMatch5.0.0smtp

symantecmail_securityMatch5.0.1smtp

AND

autonomykeyview

VendorProductVersionCPE
ibmlotus_notes6.0cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*
ibmlotus_notes6.5cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*
ibmlotus_notes7.0cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*
ibmlotus_notes8.0cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*
ibmlotus_notes8.0.1cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*
symantecmail_security*cpe:2.3:a:symantec:mail_security:*:*:domino:*:*:*:*:*
symantecmail_security5.0cpe:2.3:a:symantec:mail_security:5.0:*:*:*:*:*:*:*
symantecmail_security5.0cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*
symantecmail_security5.0.0cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*
symantecmail_security5.0.1cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_notes	6.0	cpe:2.3:a:ibm:lotus_notes:6.0:::::::*
ibm	lotus_notes	6.5	cpe:2.3:a:ibm:lotus_notes:6.5:::::::*
ibm	lotus_notes	7.0	cpe:2.3:a:ibm:lotus_notes:7.0:::::::*
ibm	lotus_notes	8.0	cpe:2.3:a:ibm:lotus_notes:8.0:::::::*
ibm	lotus_notes	8.0.1	cpe:2.3:a:ibm:lotus_notes:8.0.1:::::::*
symantec	mail_security	*	cpe:2.3:a:symantec:mail_security:::domino:::::*
symantec	mail_security	5.0	cpe:2.3:a:symantec:mail_security:5.0:::::::*
symantec	mail_security	5.0	cpe:2.3:a:symantec:mail_security:5.0::microsoft_exchange:::::
symantec	mail_security	5.0.0	cpe:2.3:a:symantec:mail_security:5.0.0::smtp:::::
symantec	mail_security	5.0.1	cpe:2.3:a:symantec:mail_security:5.0.1::smtp:::::

Rows per page:

1-10 of 111

References

secunia.com/advisories/27763

secunia.com/advisories/28140

secunia.com/advisories/28209

secunia.com/advisories/28210

secunia.com/advisories/29342

secunia.com/secunia_research/2007-95/advisory/

secunia.com/secunia_research/2007-96/advisory/

secunia.com/secunia_research/2007-97/advisory/

secunia.com/secunia_research/2007-98/advisory/

securitytracker.com/id?1019805

www.securityfocus.com/archive/1/490825/100/0/threaded

www.securityfocus.com/archive/1/490837/100/0/threaded

www.securityfocus.com/archive/1/490838/100/0/threaded

www.securityfocus.com/archive/1/490839/100/0/threaded

www.securityfocus.com/bid/28454

www.securitytracker.com/id?1019844

www.vupen.com/english/advisories/2008/1153

www.vupen.com/english/advisories/2008/1154

www.vupen.com/english/advisories/2008/1156

exchange.xforce.ibmcloud.com/vulnerabilities/41722

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.334

Percentile

97.1%

JSON

Related for CVE-2007-5406