CVE-2007-5406
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.
kpagrdr.dll 2.0.0.2 y 10.3.0.0 en el lector Applix Presents de Autonomy (anteriormente Verity) KeyView, usado por IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, no parsea adecuadamente los token largos, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y CPU) a través de un fichero .ag manipulado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-10-12 CVE Reserved
- 2008-04-10 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-12 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (20)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1019805 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/490825/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/490837/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/490838/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/490839/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/28454 | Vdb Entry | |
| http://www.securitytracker.com/id?1019844 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/1153 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/1154 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/1156 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/41722 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/27763 | 2018-10-15 | |
| http://secunia.com/advisories/28140 | 2018-10-15 | |
| http://secunia.com/advisories/28209 | 2018-10-15 | |
| http://secunia.com/advisories/28210 | 2018-10-15 | |
| http://secunia.com/advisories/29342 | 2018-10-15 | |
| http://secunia.com/secunia_research/2007-95/advisory | 2018-10-15 | |
| http://secunia.com/secunia_research/2007-96/advisory | 2018-10-15 | |
| http://secunia.com/secunia_research/2007-97/advisory | 2018-10-15 | |
| http://secunia.com/secunia_research/2007-98/advisory | 2018-10-15 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 6.0 Search vendor "Ibm" for product "Lotus Notes" and version "6.0" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 6.5 Search vendor "Ibm" for product "Lotus Notes" and version "6.5" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 7.0 Search vendor "Ibm" for product "Lotus Notes" and version "7.0" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 8.0 Search vendor "Ibm" for product "Lotus Notes" and version "8.0" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 8.0.1 Search vendor "Ibm" for product "Lotus Notes" and version "8.0.1" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | <= 7.5 Search vendor "Symantec" for product "Mail Security" and version " <= 7.5" | domino |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0 Search vendor "Symantec" for product "Mail Security" and version "5.0" | - |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0 Search vendor "Symantec" for product "Mail Security" and version "5.0" | microsoft_exchange |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.0 Search vendor "Symantec" for product "Mail Security" and version "5.0.0" | smtp |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.1 Search vendor "Symantec" for product "Mail Security" and version "5.0.1" | smtp |
Affected
| in | Autonomy Search vendor "Autonomy" | Keyview Search vendor "Autonomy" for product "Keyview" | * | - |
Affected
|