CVE-2007-6020

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a 1...

CVE-2008-1101

CVE-2008-1101 is a buffer overflow in kvdocve.dll of Autonomy/Verity KeyView used by IBM Lotus Notes 7.0.2/7.0.3. The flaw can be triggered by an overly long SRC attribute in an IMG tag, enabling remote code execution. Affected component: kvdocve.dll in KeyView engine; vulnerable via processing l...

CVE-2007-5406

CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...

CVE-2007-5405

CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...

CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisor...

Autonomy KeyView Lotus 1-2-3 File Multiple Buffer Overflow Vulnerabilities

Description Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the context of the user running the application. Multiple applications incorporate the vulnerable KeyView component, so they...

Verity KeyView SDK / Lotus Notes multiple buffer overflows

Buffer overflows on parsing .mif, .aw, .rtf, .exe, .dll, .ag, .doc...

ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities

ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-059.html October 23, 2007 -- CVE ID: -- Affected Vendor: Verity -- Affected Products: KeyView SDK -- Vulnerability Details: Several vulnerabilities exist in the popular...

Verity KeyView SDK Multiple File Format Parsing Vulnerabilities

Several vulnerabilities exist in the popular Verity KeyView SDK used in many enterprise applications like IBM Lotus Notes. When parsing several different file formats a standard stack overflow occurs allowing a malicious user to gain complete control of the affected machine under the rights of th...

CVE-2006-5970

Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with 1 a null "%00" terminated url parameter to help/urlstatusgo.html; or missing parameters to 2 help/header.html, 3 help/footer.html, 4 spell.html, 5 coreforma.html, 6 daterange.html, 7...

CVE-2006-5971

Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable...

CVE-2006-5819

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script...

CVE-2006-5971

CVE-2006-5971 describes an absolute path traversal vulnerability in Verity Ultraseek (admin/logfile.txt) prior to version 5.6.2. An attacker could read arbitrary files by supplying a crafted name variable, enabling partial confidentiality impact. The issue is rooted in improper validation of file...

CVE-2006-5970

Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with 1 a null "%00" terminated url parameter to help/urlstatusgo.html; or missing parameters to 2 help/header.html, 3 help/footer.html, 4 spell.html, 5 coreforma.html, 6 daterange.html, 7...

CVE-2006-5819

CVE-2006-5819 affects Verity Ultraseek up to version 5.7. The flaw resides in the vulnerable highlight script (/highlight/index.html), which allows an unauthenticated remote attacker to proxy web requests, enabling access to internal content, enumerate non-public hosts, and perform cross-site scr...

CVE-2006-5970: Undefined Security Weakness

Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with 1 a null "%00" terminated url parameter to help/urlstatusgo.html; or missing parameters to 2 help/header.html, 3 help/footer.html, 4 spell.html, 5 coreforma.html, 6 daterange.html, 7...

CVE-2006-5819: Undefined Security Weakness

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script...

CVE-2006-5971: Undefined Security Weakness

Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable...

CVE-2006-5819

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script...

CVE-2006-5971

Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable...