CVE-2015-5416

HP KeyView (affected versions: prior to 10.23.0.1 and prior to 10.24.0.1 in the 10.24 line) contains a GIF parsing vulnerability that can lead to remote code execution. According to ZDI-15-397, the flaw is a buffer overflow triggered by a crafted GIF image (specifically oversized ImageWidth) and ...

CVE-2016-4390

The CVE-2016-4390 entry relates to HPE KeyView’s Filter SDK (versions 10.18–10.24). A remote code execution vulnerability exists in this component, allowing an attacker to run arbitrary code on a vulnerable system via unspecified vectors. Several connected CNVD entries corroborate the existence o...

CVE-2016-4388

CVE-2016-4388 concerns remote code execution in the HPE KeyView Filter SDK (versions 10.18–10.24). The vulnerability affects the Filter SDK within HPE KeyView, allowing a remote attacker to execute arbitrary code via unspecified vectors. Multiple connected sources (CNVD/NVD entries) corroborate t...

CVE-2015-5417

HP KeyView (versions < 10.23.0.1 and

CVE-2016-4389

The CVE-2016-4389 entry affects HPE KeyView, specifically the Filter SDK versions 10.18–10.24. The vulnerability enables remote arbitrary code execution via unspecified vectors. Root cause details are not provided in the connected documents, and no explicit exploitation details or in-the-wild act...

CVE-2015-5420

HP KeyView prior to 10.23.0.1 and 10.24.x before 10.24.0.1 has a remote code execution vulnerability in the ODF parsing path (ZDI-15-404) that can be triggered by handling a malformed ODF file and requires user interaction (e.g., opening a malicious file/page). Exploitation leads to arbitrary cod...

CVE-2015-5424

HP KeyView (affected: v10.24 and earlier; v10.23.0.1 and v10.24.0.1 fixed) contains an unspecified vulnerability (CVE-2015-5424) enabling remote code execution. ZDI-15-398 details a DOCX parsing/use-after-free flaw that can be triggered by opening a malicious file/page, leading to arbitrary code ...

CVE-2016-4404

The CVE-2016-4404 issue affects the HP KeyView product family, specifically the Filter SDK component, with remote code execution possible due to a memory-allocation issue in versions earlier than v11.2. Public documentation indicates an unauthenticated, remote-exploit scenario via network access,...

CVE-2015-5421

HP KeyView contains a remote code execution vulnerability (CVE-2015-5421) in the handling of Lotus wk1 files. Affected versions include HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1. The issue arises from parsing of certain data, allowing an unauthenticated remote attacker to execute a...

CVE-2016-4403

CVE-2016-4403 concerns the HP KeyView product, specifically the Filter SDK component, vulnerable in versions earlier than v11.2. The issue is a memory corruption vulnerability that could be exploited remotely to achieve code execution. The connected documents confirm the vulnerability’s existence...

CVE-2016-4387

The CVE entry for CVE-2016-4387 relates to HPE KeyView’s Filter SDK (versions 10.18–10.24). The connected CNVD entries specify a remote code execution vulnerability in the Filter SDK that allows a remote attacker to execute arbitrary code. Details on how to exploit (vectors) are not provided in t...

CVE-2016-4402

CVE-2016-4402 concerns the HP KeyView product, specifically the Filter SDK component, with affected versions earlier than 11.2 . The vulnerability is described as a remote code execution via a buffer overflow , allowing an attacker to run arbitrary code on the affected system without user interac...

CVE-2015-5419

HP KeyView contains a remote code execution vulnerability (CVE-2015-5419) affecting versions before 10.23.0.1 and 10.24.x before 10.24.0.1. The issue stems from GIF parsing handling, allowing a remote attacker to execute arbitrary code when a user opens a crafted GIF or visits a malicious page/fi...

CVE-2015-5422

HP KeyView (versions prior to 10.23.0.1 and prior to 10.24.0.1) is affected by remote-code-execution vulnerabilities identified as CVE-2015-5422, with exploit details tied to ZDI-CAN-2883 and a related ZDI advisory for AutoCAD parsing (ZDI-15-403). The issues allow remote code execution via unkno...

CVE-2015-5423

HP KeyView is affected by CVE-2015-5423. The vulnerability resides in HP KeyView’s HTML parsing/IDOL handling, where a buffer overflow could allow remote code execution. It requires user interaction (opening a malicious page or file). Remediate by upgrading to HP KeyView 10.23.0.1 or 10.24.0.1 as...

CVE-2015-5418

HP KeyView (before 10.23.0.1 and before 10.24.0.1) contains a GIF parsing vulnerability (ZDI-CAN-2877 / ZDI-15-401) leading to remote code execution. Exploitation may require user interaction (e.g., opening a malicious GIF/page). The fix is to upgrade to HP KeyView v10.23.0.1 or v10.24.0.1 as adv...