CVE-2007-5399

Autonomy KeyView 10.3.0.0 - Heap-Based Buffer Overflow via EML Header Parsing

Title source: llm
STIX 2.1

Description

Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long (1) To, (2) Cc, (3) Bcc, (4) From, (5) Date, (6) Subject, (7) Priority, (8) Importance, or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header, related to creation of an associated filename.

References (12)

Core 12
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28209
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490832/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1156
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28454
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28210
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019842
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490833/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1153
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41723

Scores

EPSS 0.0553
EPSS Percentile 91.9%

Details

CWE
CWE-119
Status published
Products (6)
autonomy/keyview 10.3.0.0
ibm/lotus_notes 6.0
ibm/lotus_notes 6.5
ibm/lotus_notes 7.0
ibm/lotus_notes 7.0.2
ibm/lotus_notes 7.0.3
Published Apr 10, 2008
Tracked Since Feb 18, 2026