Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	28454
Class:	Boundary Condition Error
CVE:	CVE-2007-5399 CVE-2007-5405 CVE-2007-5406 CVE-2007-6020 CVE-2008-0066 CVE-2008-1101
Remote:	Yes
Local:	No
Published:	Apr 08 2008 12:00AM
Updated:	Apr 29 2008 07:26PM
Credit:	Dyon Balding and Carsten Eiram of Secunia Research
Vulnerable:	Symantec Mail Security For Smtp 5.0.1 Symantec Mail Security For Smtp 5.0 Symantec Mail Security For Microsoft Exchange 5.0 Symantec Mail Security for Domino 7.5 Symantec Mail Security Appliance 5.0 Symantec Mail Security Appliance 5.0.0.24 IBM Lotus Notes 7.0.3 IBM Lotus Notes 7.0.2 IBM Lotus Notes 7.0.1 IBM Lotus Notes 6.5.6 IBM Lotus Notes 6.5.5 IBM Lotus Notes 6.5.4 IBM Lotus Notes 6.5.3 IBM Lotus Notes 6.5.2 IBM Lotus Notes 6.5.1 IBM Lotus Notes 6.5 IBM Lotus Notes 6.0.5 IBM Lotus Notes 6.0.4 IBM Lotus Notes 6.0.3 IBM Lotus Notes 6.0.2 IBM Lotus Notes 6.0.1 IBM Lotus Notes 6.0 IBM Lotus Notes 8.0 IBM Lotus Notes 7.0.2 FP1 IBM Lotus Notes 7.0 IBM Lotus Notes 6.5.6 FP2 IBM Lotus Notes 6.5.5 FP3 IBM Lotus Notes 6.5.5 FP2 Autonomy Keyview Viewer SDK 10.3 Autonomy Keyview Viewer SDK 9 Autonomy Keyview Viewer SDK 8 Autonomy Keyview Viewer SDK 7 Autonomy Keyview Viewer SDK 10 Autonomy Keyview Filter SDK 10.3 Autonomy Keyview Filter SDK 9 Autonomy Keyview Filter SDK 8 Autonomy Keyview Filter SDK 7 Autonomy Keyview Filter SDK 10 Autonomy Keyview Export SDK 10.3 Autonomy Keyview Export SDK 9 Autonomy Keyview Export SDK 8 Autonomy Keyview Export SDK 7 Autonomy Keyview Export SDK 10 ActivePDF DocConverter 3.8.4 .0
Not Vulnerable:	Symantec Mail Security For Smtp 5.0.1 Patch 189 Symantec Mail Security For Microsoft Exchange 5.0.10 .382 Symantec Mail Security for Domino 7.5.3.25 Symantec Mail Security Appliance 5.0.0-36 Symantec Mail Security Appliance 5.0.0-36 Autonomy Keyview Viewer SDK 10.4 Autonomy Keyview Filter SDK 10.4 Autonomy Keyview Export SDK 10.4

Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

Autonomy KeyView module is prone to multiple stack- and heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers.

Exploiting these issues will allow an attacker to corrupt memory and to cause denial-of-service conditions or potentially to execute arbitrary code in the context of the application using the module.

Multiple products using the KeyView module are affected.

Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has released updates to address these issues. Please see the references for more information.

Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

References:

• DocConverter Product Page (activePDF)
  
• IBM Lotus Notes Homepage (IBM)
  
• KeyView Homepage (Autonomy)
  
• Symantec Homepage (Symantec)
  
• Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflow (Secunia Research )
  
• Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities (Secunia Research )
  
• Secunia Research: Autonomy Keyview EML Reader Buffer Overflows (Secunia Research )
  
• Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows (Secunia Research )
  
• Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities (Secunia Research )
  
• Secunia Research: Lotus Notes EML Reader Buffer Overflows (Secunia Research )
  
• Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows (Secunia Research )
  
• Secunia Research: Lotus Notes htmsr.dll Buffer Overflows (Secunia Research )
  
• Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflow (Secunia Research )
  
• Potential security vulnerabilities in Lotus Notes file viewers for Applix Presen (IBM)
  
• Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities (Secunia Research)
  
• Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflow (Secunia Research)
  
• Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities (Secunia Research)
  
• Secunia Research: Autonomy Keyview EML Reader Buffer Overflows (Secunia Research)
  
• Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows (Secunia Research)
  
• Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities (Secunia Research)
  
• Secunia Research: Lotus Notes EML Reader Buffer Overflows (Secunia Research)
  
• Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows (Secunia Research)
  
• Secunia Research: Lotus Notes htmsr.dll Buffer Overflows (Secunia Research)
  
• Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow (Secunia Research)
  
• Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities (Secunia Research)
  
• Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflow (Secunia Research)
  
• SYM08-010 Symantec Mail Security Autonomy KeyView Module Vulnerability (Symantec)