CVE-2011-1213

Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W...

CVE-2011-1216

CVE-2011-1216 is a stack-based buffer overflow in Autonomy KeyView’s Verity/assr.dll used by IBM Lotus Notes before 8.5.2 FP3. An attacker could trigger arbitrary code execution by crafting tag data in an Applix spreadsheet attachment, leading to remote code execution under the Notes process. The...

CVE-2011-1512

CVE-2011-1512 is a heap-based buffer overflow in Autonomy KeyView’s xlssr.dll used by IBM Lotus Notes prior to 8.5.2 FP3. A malformed BIFF record in a .xls attachment can trigger memory corruption and remote code execution. Multiple security advisories (CoreLabs, OpenVAS, Tenable/Nessus) link CVE...

CVE-2011-1214

Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ...

CVE-2011-1216

Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7...

CVE-2011-1512

Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR...

CVE-2011-1213

In IBM Lotus Notes, the Autonomy KeyView component (lzhsr.dll) is vulnerable to a stack-based buffer overflow via a crafted .lzh header, caused by an integer underflow in KeyView’s parsing. A remote attacker could execute arbitrary code on affected systems running Lotus Notes before 8.5.2 FP3. Mi...

CVE-2011-1217

CVE-2011-1217 : Buffer overflow in kpprzrdr.dll within Autonomy KeyView, used by IBM Lotus Notes prior to 8.5.2 FP3, can be triggered by a crafted .prz attachment to remote-execute arbitrary code. The vulnerability affects the Lotus Notes workflow through the KeyView component, relies on a malfor...

CVE-2011-1217

Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment. NOTE: some of these details are obtained from third party information...

CVE-2011-1218

Summary: CVE-2011-1218 is a buffer overflow in Autonomy KeyView’s kvarcve.dll, affecting IBM Lotus Notes prior to 8.5.2 FP3. A crafted ZIP attachment can trigger remote arbitrary-code execution. The issue is tied to the Verity KeyView Filter used by affected Note applications. Impact (as stated):...

Multi-Vendor Autonomy Verity Keyview PRZ Reader Filter Overflow

SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address a security issue being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Mail...

CVE-2011-1215: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND...

CVE-2011-1213: Undefined Security Weakness

Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W...

CVE-2011-1214: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ...

CVE-2011-1512: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR...

CVE-2011-1216: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7...

CVE-2011-1217: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment. NOTE: some of these details are obtained from third party information...

CVE-2011-1218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)

This module exploits a stack buffer overflow in Lotus Notes 8.5.2 when parsing a malformed, specially crafted LZH file. This vulnerability was discovered binaryhouse.net Module Options msf use exploit/windows/fileformat/lotusnotes/lzh msf undefinedlzh show actions ...actions... msf undefinedlzh s...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)

This module exploits a stack buffer overflow in Lotus Notes 8.5.2 when parsing a malformed, specially crafted LZH file. This vulnerability was discovered binaryhouse.net Module Options msf use exploit/windows/lotus/lotusnotes/lzh msf undefinedlzh show actions ...actions... msf undefinedlzh set...