VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 10, 2007· Updated Apr 23, 2026

CVE-2007-5909

CVE-2007-5909

Description

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

Affected products

11
  • Activepdf/Docconverter
    cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*
  • Autonomy Corporation/Keyview Export Sdk
    cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*
    Range: <=9.2.0
  • Autonomy Corporation/Keyview Filter Sdk
    cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*
    Range: <=9.2.0
  • Autonomy Corporation/Keyview Viewer Sdk
    cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*
    Range: <=9.2.0
  • IBM/Lotus Notes
    cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*
    Range: <=7.0.2
  • Symantec/Mail Security6 versions
    cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:*+ 5 more
    • cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:*
    • cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*
    • cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*
    • cpe:2.3:a:symantec:mail_security:5.0:*:appliance:*:*:*:*:*
    • cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*
    • cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

17

News mentions

0

No linked articles in our index yet.