CVE-2008-1101

CVE-2008-1101 is a buffer overflow in kvdocve.dll of Autonomy/Verity KeyView used by IBM Lotus Notes 7.0.2/7.0.3. The flaw can be triggered by an overly long SRC attribute in an IMG tag, enabling remote code execution. Affected component: kvdocve.dll in KeyView engine; vulnerable via processing l...

CVE-2007-6020

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a 1...

CVE-2007-5406

CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...

CVE-2007-5399

Summary (CVE-2007-5399) : Multiple heap-based buffer overflows in the Autonomy/Verity KeyView EML reader (emlsr.dll) affect Autonomous KeyView 10.3.0.0, used by IBM Lotus Notes. Vulnerabilities arise from parsing problematic EML headers (To, Cc, Bcc, From, Date, Subject, Priority, Importance, X-M...

CVE-2008-1718

CVE-2008-1718 describes a buffer overflow in mimesr.dll used by Autonomy KeyView (formerly Verity) as integrated in IBM Lotus Notes prior to 8.0. The vulnerability could allow user‑assisted remote code execution via a crafted Text MIME attachment in an email, due to a flaw in parsing the MIME Tex...

CVE-2008-0066

CVE-2008-0066 covers multiple buffer overflows in htmsr.dll, the HTML speed reader used by Autonomy KeyView, implicated in IBM Lotus Notes 7.0.2/7.0.3. The flaws can be triggered by processing an HTML document containing (1) large chunks of data, (2) a long URL in the BACKGROUND attribute of a BO...

CVE-2007-5405

CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...

CVE-2007-5399

Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long 1 To, 2 Cc, 3 Bcc, 4 From, 5 Date, 6 Subject, 7 Priority, 8 Importance, or 9 X-MSMail-Priority...

CVE-2008-1101

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML docume...

CVE-2008-1101: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML docume...

CVE-2007-5399: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long 1 To, 2 Cc, 3 Bcc, 4 From, 5 Date, 6 Subject, 7 Priority, 8 Importance, or 9 X-MSMail-Priority...

CVE-2008-0066: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with 1 "large chunks of data," or a long URL in the 2 BACKGROUND attribute of a BO...

CVE-2008-1718: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

CVE-2007-5406: Undefined Security Weakness

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

CVE-2007-6593

Multiple stack-based buffer overflows in l123sr.dll in Autonomy formerly Verity KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the 1 Length and 2 Value fields for certain Types in a Lotus 1-2-3 .123 file in the Worksheet...

Stack overflow

Multiple stack-based buffer overflows in l123sr.dll in Autonomy formerly Verity KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the 1 Length and 2 Value fields for certain Types in a Lotus 1-2-3 .123 file in the Worksheet...

CVE-2007-6593

Multiple stack-based buffer overflows in l123sr.dll in Autonomy formerly Verity KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the 1 Length and 2 Value fields for certain Types in a Lotus 1-2-3 .123 file in the Worksheet...

CVE-2007-6593

CVE-2007-6593 is a buffer overflow in Autonomy KeyView (l123sr.dll) used by IBM Lotus Notes (versions 5.x–8.x) when viewing Lotus 1-2-3 (.123) Worksheet files. The vulnerability arises from a boundary/stack-based overflow in SRANGE handling, enabling user‑assisted remote code execution if a malic...

CVE-2007-6593: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in l123sr.dll in Autonomy formerly Verity KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the 1 Length and 2 Value fields for certain Types in a Lotus 1-2-3 .123 file in the Worksheet...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...