First published: Sat Nov 10 2007(Updated: )
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Mail Security | =5.0.1 | |
IBM Lotus Notes | <=7.0.2 | |
Autonomy KeyView | <=9.2.0 | |
Symantec Mail Security | =5.0.0.24 | |
Symantec Mail Security | =7.5 | |
ActivePDF DocConverter | =3.8.2_.5 | |
Symantec Mail Security | =5.0 | |
Autonomy KeyView | <=9.2.0 | |
Autonomy KeyView | <=9.2.0 | |
Symantec Mail Security | =5.0 | |
Symantec Mail Security | =5.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5910 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
To fix CVE-2007-5910, you should update to a version of the affected software that is not vulnerable, specifically versions later than 9.2.0.12 for Autonomy KeyView and the latest updates for other affected products.
CVE-2007-5910 affects several software products, including ActivePDF DocConverter, Autonomy KeyView Viewer, Filter and Export SDK, IBM Lotus Notes, and various versions of Symantec Mail Security.
CVE-2007-5910 exploits a stack-based buffer overflow vulnerability, which can be triggered by specially crafted input.
While CVE-2007-5910 was discovered years ago, it remains a potential threat for systems that have not been updated and patched accordingly.