CVE-2007-5910

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-10 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.

Affected products

activePDF Docconverter: 3.8.2_.5
Autonomy Keyview Export Sdk: through 9.2.0
Autonomy Keyview Filter Sdk: through 9.2.0
Autonomy Keyview Viewer Sdk: through 9.2.0
IBM Lotus Notes: through 7.0.2
Symantec Mail Security: 5.0, 5.0.0, 5.0.0.24, 5.0.1, 7.5

References

http://secunia.com/advisories/27304
http://securityreason.com/securityalert/3357
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html
http://securitytracker.com/id?1018853
http://securitytracker.com/id?1018886
http://vuln.sg/lotusnotes702-en.html
http://vuln.sg/lotusnotes702wpd-en.html
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111
http://www.securityfocus.com/archive/1/482664
http://www.securityfocus.com/bid/26175
http://www.vupen.com/english/advisories/2007/3596
http://www.vupen.com/english/advisories/2007/3697

Get alerted when CVE-2007-5910 or the next vulnerability affects your stack