activePDF WebGrabber ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in activePDF WebGrabber 3.8. When sending an overly long string to the GetStatus method of APWebGrb.ocx 3.8.2.0 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vector accordingly...

ActivePDF / Lotus Notes / Symantec Mail Security / Autonomy Keyview multiple security vulnerabilities

Multiple buffer overflows on Folio Flat File / Applix graphics format parsing...

Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Buffer overflow

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...

Code injection

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

Stack overflow

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a 1...

CVE-2007-6020

CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...

CVE-2007-5405

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...

CVE-2007-5406

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

CVE-2007-5406

CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...

CVE-2007-5405

CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...

activePDF Server < 3.8.6 Packet Handling Remote Overflow (credentialed check)

activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications. The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifyin...

activePDF Server < 3.8.6 Packet Handling Remote Overflow

activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications. The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifyin...

activePDF服务器报文处理远程堆溢出漏洞

BUGTRAQ ID: 28013 CVECAN ID: CVE-2007-5397 activePDF服务器用于为企业或Web应用提供集成的PDF生成和动态PDF转换功能。 activePDF Server服务（APServer.exe）在处理畸形客户端数据时存在堆溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果用户连接到了该服务（默认端口53535/TCP）并在发送的报文中指定的大小小于之后数据的实际大小的话，就可能触发这个溢出，导致执行任意指令。 activePDF activePDF 3.8.5.14 activePDF activePDF 3.8.4 厂商补丁：...

Heap overflow

Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...

CVE-2007-5397

Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...

CVE-2007-5397

Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...

CVE-2007-5397

CVE-2007-5397 describes a heap-based buffer overflow in the activePDF Server (APServer.exe) used by activePDF Server products. Vulnerable versions include 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16. The flaw allows a remote attacker to execute arbitrary code by sending a craf...

activePDF Server报文处理远程堆溢出漏洞

BUGTRAQ ID: 28013 CNCAN ID:CNCAN-2008022801 activePDF Server是一款打印转换成PDF文件的应用服务程序。 activePDF Server服务处理客户端数据时存在便捷错误，远程攻击者可以利用漏洞发送小于实际数据大小的报文可导致触发堆溢出，可能以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 ActivePDF activePDF Server 3.8.5 14 ActivePDF activePDF Server 3.8.4 厂商解决方案 升级到activePDF Server 3.8.6.16版本：...