CVE-2008-1101
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 5.5%
Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.
Affected products
n/a · n/aReferences
http://secunia.com/advisories/28140http://secunia.com/advisories/28209http://secunia.com/advisories/28210http://secunia.com/secunia_research/2008-12/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/41725http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453http://www.securityfocus.com/archive/1/490826/100/0/threadedhttp://www.securityfocus.com/bid/28454http://www.vupen.com/english/advisories/2008/1153http://www.vupen.com/english/advisories/2008/1156