CVE-2007-5910
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.62%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.62% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- activepdf/docconverter · autonomy/keyview export sdk · autonomy/keyview filter sdk · autonomy/keyview viewer sdk · ibm/lotus notes · symantec/mail security
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/27304Patch, Vendor Advisory
- http://securityreason.com/securityalert/3357
- http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html
- http://securitytracker.com/id?1018853
- http://securitytracker.com/id?1018886
- http://vuln.sg/lotusnotes702-en.html
- http://vuln.sg/lotusnotes702wpd-en.html
- http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111
- http://www.securityfocus.com/archive/1/482664
- http://www.securityfocus.com/bid/26175
- http://www.vupen.com/english/advisories/2007/3596
- http://www.vupen.com/english/advisories/2007/3697
- http://secunia.com/advisories/27304Patch, Vendor Advisory
- http://securityreason.com/securityalert/3357
- http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html
- http://securitytracker.com/id?1018853
- http://securitytracker.com/id?1018886
- http://vuln.sg/lotusnotes702-en.html
- http://vuln.sg/lotusnotes702wpd-en.html
- http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111
- http://www.securityfocus.com/archive/1/482664
- http://www.securityfocus.com/bid/26175
- http://www.vupen.com/english/advisories/2007/3596
- http://www.vupen.com/english/advisories/2007/3697
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.