CVE-2008-0066

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-10 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with (1) "large chunks of data," or a long URL in the (2) BACKGROUND attribute of a BODY element or (3) SRC attribute of an IMG element.

Affected products

Autonomy Keyview: all versions
IBM Lotus Notes: 7.0.2, 7.0.3

References

http://secunia.com/advisories/28140
http://secunia.com/advisories/28209
http://secunia.com/advisories/28210
http://secunia.com/secunia_research/2008-3/advisory/
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
http://www.securityfocus.com/archive/1/490828/100/0/threaded
http://www.securityfocus.com/bid/28454
http://www.securitytracker.com/id?1019843
http://www.vupen.com/english/advisories/2008/1153
http://www.vupen.com/english/advisories/2008/1156
https://exchange.xforce.ibmcloud.com/vulnerabilities/41724
http://secunia.com/advisories/28140

Get alerted when CVE-2008-0066 or the next vulnerability affects your stack