CVE-2007-5406

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-10 · updated 2026-06-16

Description

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.

Affected products

Autonomy Keyview: all versions
IBM Lotus Notes: 6.0, 6.5, 7.0, 8.0, 8.0.1
Symantec Mail Security: through 7.5; 5.0, 5.0.0, 5.0.1

References

http://secunia.com/advisories/27763
http://secunia.com/advisories/28140
http://secunia.com/advisories/28209
http://secunia.com/advisories/28210
http://secunia.com/advisories/29342
http://secunia.com/secunia_research/2007-95/advisory/
http://secunia.com/secunia_research/2007-96/advisory/
http://secunia.com/secunia_research/2007-97/advisory/
http://secunia.com/secunia_research/2007-98/advisory/
http://securitytracker.com/id?1019805
http://www.securityfocus.com/archive/1/490825/100/0/threaded
http://www.securityfocus.com/archive/1/490837/100/0/threaded

Get alerted when CVE-2007-5406 or the next vulnerability affects your stack