CVE-2007-6020
- State
- Published
- Severity
- Not scored
- Published
- Apr 10, 2008
- Updated
- Aug 7, 2024
- Reserved
- Nov 19, 2007
Description
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 28140third-party-advisory
- http://secunia.com/secunia_research/2007-106/advisory/
- 29342third-party-advisory
- 27763third-party-advisory
- http://www.symantec.com/avcenter/security/Content/2008.04.08e.html
- 28209third-party-advisory
- ADV-2008-1156vdb-entry
- 20080414 Secunia Research: activePDF DocConverter Folio Flat File ParsingBuffer Overflowsmailing-list
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
- 28454vdb-entry
- http://secunia.com/secunia_research/2007-105/advisory/
- 20080414 Secunia Research: Autonomy Keyview Folio Flat File Parsing BufferOverflowsmailing-list
- 28210third-party-advisory
- 20080414 Secunia Research: Symantec Mail Security Folio Flat File ParsingBuffer Overflowsmailing-list
- 20080414 Secunia Research: Lotus Notes Folio Flat File Parsing BufferOverflowsmailing-list
- autonomy-keyview-foliosr-bo(41716)vdb-entry
- ADV-2008-1154vdb-entry
- 1019841vdb-entry
- 1019805vdb-entry
- ADV-2008-1153vdb-entry
- http://secunia.com/secunia_research/2007-104/advisory/
- http://secunia.com/secunia_research/2007-107/advisory/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.