CVE-2005-2618: Buffer Overflow
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2618?
CVE-2005-2618 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2005-2618?
To fix CVE-2005-2618, upgrade the affected Autonomy KeyView SDK and IBM Lotus Notes software to the latest versions that mitigate this vulnerability.
Who is affected by CVE-2005-2618?
CVE-2005-2618 affects users of Autonomy KeyView SDK versions prior to 9.2.0 and multiple versions of IBM Lotus Notes.
What types of attacks can CVE-2005-2618 facilitate?
CVE-2005-2618 can facilitate remote attacks that may lead to the execution of arbitrary code on the affected systems.
Which components are vulnerable in CVE-2005-2618?
The vulnerability in CVE-2005-2618 stems primarily from vulnerabilities in the uudrdr.dll component of the Autonomy KeyView SDK.