CVE-2007-5405

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-10 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.

Affected products

activePDF Docconverter: 3.8.2_.5, 3.8.4.0
Autonomy Keyview: 2.0.0.2, 10.3.0.0
IBM Lotus Notes: 6.0, 6.5, 7.0, 7.0.2, 7.0.3
Symantec Mail Security: 5.0, 5.0.0, 5.0.1, 7.5
Symantec Mail Security Appliance: 5.0

References

http://secunia.com/advisories/27763
http://secunia.com/advisories/28140
http://secunia.com/advisories/28209
http://secunia.com/advisories/28210
http://secunia.com/advisories/29342
http://secunia.com/secunia_research/2007-95/advisory/
http://secunia.com/secunia_research/2007-96/advisory/
http://secunia.com/secunia_research/2007-97/advisory/
http://secunia.com/secunia_research/2007-98/advisory/
http://securitytracker.com/id?1019805
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
http://www.securityfocus.com/archive/1/490825/100/0/threaded

Get alerted when CVE-2007-5405 or the next vulnerability affects your stack