{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-04-08T00:00:00", "descriptions": [{"lang": "en", "value": "kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "28140", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28140"}, {"name": "29342", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29342"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-97/advisory/"}, {"name": "27763", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27763"}, {"name": "28209", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28209"}, {"name": "20080414 Secunia Research: Symantec Mail Security Applix Graphics ParsingVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490838/100/0/threaded"}, {"name": "autonomy-keyview-applix-dos(41722)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41722"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-96/advisory/"}, {"name": "ADV-2008-1156", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1156"}, {"name": "28454", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/28454"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-95/advisory/"}, {"name": "28210", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28210"}, {"name": "1019844", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1019844"}, {"name": "20080414 Secunia Research: Lotus Notes Applix Graphics ParsingVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490825/100/0/threaded"}, {"name": "ADV-2008-1154", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1154"}, {"name": "20080414 Secunia Research: Autonomy Keyview Applix Graphics ParsingVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490837/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-98/advisory/"}, {"name": "20080414 Secunia Research: activePDF DocConverter Applix Graphics ParsingVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490839/100/0/threaded"}, {"name": "1019805", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1019805"}, {"name": "ADV-2008-1153", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1153"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2007-5406", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "28140", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28140"}, {"name": "29342", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29342"}, {"name": "http://secunia.com/secunia_research/2007-97/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-97/advisory/"}, {"name": "27763", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27763"}, {"name": "28209", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28209"}, {"name": "20080414 Secunia Research: Symantec Mail Security Applix Graphics ParsingVulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490838/100/0/threaded"}, {"name": "autonomy-keyview-applix-dos(41722)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41722"}, {"name": "http://secunia.com/secunia_research/2007-96/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-96/advisory/"}, {"name": "ADV-2008-1156", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1156"}, {"name": "28454", "refsource": "BID", "url": "http://www.securityfocus.com/bid/28454"}, {"name": "http://secunia.com/secunia_research/2007-95/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-95/advisory/"}, {"name": "28210", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28210"}, {"name": "1019844", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1019844"}, {"name": "20080414 Secunia Research: Lotus Notes Applix Graphics ParsingVulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490825/100/0/threaded"}, {"name": "ADV-2008-1154", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1154"}, {"name": "20080414 Secunia Research: Autonomy Keyview Applix Graphics ParsingVulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490837/100/0/threaded"}, {"name": "http://secunia.com/secunia_research/2007-98/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-98/advisory/"}, {"name": "20080414 Secunia Research: activePDF DocConverter Applix Graphics ParsingVulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490839/100/0/threaded"}, {"name": "1019805", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1019805"}, {"name": "ADV-2008-1153", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1153"}]}}}}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2007-5406", "datePublished": "2008-04-10T18:00:00", "dateReserved": "2007-10-12T00:00:00", "dateUpdated": "2018-10-15T20:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "1E234AD1-7202-421E-82C8-880E84876021", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "1360A50E-C1E1-4690-874A-04CC7C1A77CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "68AEB13D-C7C6-426F-8484-85EFF7245DF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "692E295E-E650-42D5-AF7A-D6276C3D76E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "50660BA1-A24A-4DBF-AB59-1CF04FA54120", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_security:*:*:domino:*:*:*:*:*", "matchCriteriaId": "6D9CF359-CBCB-4EA2-B189-3CF01CE694D0", "versionEndIncluding": "7.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_security:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "9C3D6178-9D83-44C7-8EBB-50CDB68CB5EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*", "matchCriteriaId": "9608BF57-0D9A-4874-BFDA-C92447FACD70", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*", "matchCriteriaId": "5E7788BD-652E-4306-AED0-6AE7F9A07836", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*", "matchCriteriaId": "A8430D5E-A8A7-4724-8A6B-B5E2CA437729", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file."}, {"lang": "es", "value": "kpagrdr.dll 2.0.0.2 y 10.3.0.0 en el lector Applix Presents de Autonomy (anteriormente Verity) KeyView, usado por IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, no parsea adecuadamente los token largos, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de memoria y CPU) a trav\u00e9s de un fichero .ag manipulado."}], "evaluatorComment": "IBM description: http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453\r\n\r\nSymantec description:\r\nhttp://www.symantec.com/avcenter/security/Content/2008.04.08e.html", "id": "CVE-2007-5406", "lastModified": "2018-10-15T21:44:34.530", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-04-10T18:05:00.000", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27763"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28140"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28209"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28210"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29342"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-95/advisory/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-96/advisory/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-97/advisory/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-98/advisory/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://securitytracker.com/id?1019805"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/490825/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/490837/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/490838/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/490839/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/28454"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securitytracker.com/id?1019844"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.vupen.com/english/advisories/2008/1153"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.vupen.com/english/advisories/2008/1154"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.vupen.com/english/advisories/2008/1156"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41722"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}