CVE-2007-5909
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.
Published:Nov 10, 2007
Last Modified:Apr 23, 2026
EPS:Nov 10, 2007
EPSS Score:0.25869
CVSS Score:9.3
Affected Products
Vendor
Product
Action
Vendor
Activepdf
Product
Docconverter
Activepdf
Docconverter
Vendor
Autonomy
Product
Keyview Export Sdk
Autonomy
Keyview Export Sdk
Vendor
Autonomy
Product
Keyview Filter Sdk
Autonomy
Keyview Filter Sdk
Vendor
Autonomy
Product
Keyview Viewer Sdk
Autonomy
Keyview Viewer Sdk
Vendor
Ibm
Product
Lotus Notes
Ibm
Lotus Notes
Vendor
Symantec
Product
Mail Security
Symantec
Mail Security
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
