Lucene search

MitreCVE-2007-6008

HistoryNov 15, 2007 - 10:46 p.m.

CVE-2007-6008

2007-11-1522:46:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-6008

information security

buffer overflow

autonomy keyview viewer

content-type header

eml file

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.017

Percentile

88.2%

JSON

Heap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK allows remote attackers to execute arbitrary code via a long Content-Type header line in an EML file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

autonomykeyview_export_sdkRange≤2.0

autonomykeyview_filter_sdkRange≤2.0

autonomykeyview_viewer_sdkRange≤2.0

VendorProductVersionCPE
autonomykeyview_export_sdk*cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*
autonomykeyview_filter_sdk*cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk*cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autonomy	keyview_export_sdk	*	cpe:2.3:a:autonomy:keyview_export_sdk::::::::
autonomy	keyview_filter_sdk	*	cpe:2.3:a:autonomy:keyview_filter_sdk::::::::
autonomy	keyview_viewer_sdk	*	cpe:2.3:a:autonomy:keyview_viewer_sdk::::::::

References

secunia.com/advisories/27304

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.017

Percentile

88.2%

JSON

Related for CVE-2007-6008