CVE-2007-5909

CVE-2007-5909

Publicada em · Atualizada em

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 21%
probabilidade de exploração
21%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.
Produtos afetados
n/a · n/a
Referências
http://secunia.com/advisories/27304http://securityreason.com/securityalert/3357http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.htmlhttp://securitytracker.com/id?1018853http://securitytracker.com/id?1018886http://vuln.sg/lotusnotes702doc-en.htmlhttp://vuln.sg/lotusnotes702-en.htmlhttp://vuln.sg/lotusnotes702mif-en.htmlhttp://vuln.sg/lotusnotes702sam-en.htmlhttp://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21272836http://www.securityfocus.com/archive/1/482664