CVE-2007-6020: Buffer Overflow
First published: Thu Apr 10 2008(Updated: )
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Lotus Notes | =6.0 | |
| Symantec Mail Security Appliance | =5.0 | |
| Symantec Mail Security | =5.0.1 | |
| Autonomy KeyView | =10.3.0.0 | |
| ActivePDF DocConverter | =3.8.4.0 | |
| Autonomy KeyView | =2.0.0.2 | |
| IBM Lotus Notes | =7.0 | |
| IBM Lotus Notes | =7.0.3 | |
| Symantec Mail Security | =7.5 | |
| IBM Lotus Notes | =6.5 | |
| Symantec Mail Security | =5.0 | |
| IBM Lotus Notes | =7.0.2 | |
| Symantec Mail Security | =5.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/secunia_research/2007-104/advisory/
- http://secunia.com/secunia_research/2007-105/advisory/
- http://secunia.com/secunia_research/2007-106/advisory/
- http://secunia.com/secunia_research/2007-107/advisory/
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
- http://www.symantec.com/avcenter/security/Content/2008.04.08e.html
- http://www.securityfocus.com/bid/28454
- http://securitytracker.com/id?1019805
- http://secunia.com/advisories/27763
- http://secunia.com/advisories/28140
- http://secunia.com/advisories/28209
- http://secunia.com/advisories/28210
- http://secunia.com/advisories/29342
- http://www.securitytracker.com/id?1019841
- http://www.vupen.com/english/advisories/2008/1153
- http://www.vupen.com/english/advisories/2008/1154
- http://www.vupen.com/english/advisories/2008/1156
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41716
- http://www.securityfocus.com/archive/1/490831/100/0/threaded
- http://www.securityfocus.com/archive/1/490830/100/0/threaded
- http://www.securityfocus.com/archive/1/490829/100/0/threaded
- http://www.securityfocus.com/archive/1/490827/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/tags
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/ibm
- canonical/ibm lotus notes
- version/ibm lotus notes/6.0
- vendor/symantec
- canonical/symantec mail security appliance
- version/symantec mail security appliance/5.0
- canonical/symantec mail security
- version/symantec mail security/5.0.1
- vendor/autonomy
- canonical/autonomy keyview
- version/autonomy keyview/10.3.0.0
- vendor/activepdf
- canonical/activepdf docconverter
- version/activepdf docconverter/3.8.4.0
- version/autonomy keyview/2.0.0.2
- version/ibm lotus notes/7.0
- version/ibm lotus notes/7.0.3
- version/symantec mail security/7.5
- version/ibm lotus notes/6.5
- version/symantec mail security/5.0
- version/ibm lotus notes/7.0.2
- version/symantec mail security/5.0.0