Vulnerability CVE-2007-5406 - CERT Civis.Net

Vulnerability Name:

CVE-2007-5406 (CCN-41722)

Assigned:

2007-10-12

Published:

2008-04-08

Updated:

2018-10-15

Summary:

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.
IBM description: http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453

Symantec description:
http://www.symantec.com/avcenter/security/Content/2008.04.08e.html

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2007-5406

Source: CCN
Type: SA27763
Symantec Mail Security for Exchange Attachment Parsing Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
27763

Source: CCN
Type: SA28140
activePDF DocConverter Multiple Parsing Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
28140

Source: CCN
Type: SA28209
Autonomy Keyview SDK Multiple Buffer Overflows

Source: SECUNIA
Type: Vendor Advisory
28209

Source: CCN
Type: SA28210
Lotus Notes Multiple Keyview Parsing Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
28210

Source: CCN
Type: SA29342
Symantec Mail Security Attachment Parsing Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
29342

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2007-95/advisory/

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2007-96/advisory/

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2007-97/advisory/

Source: CCN
Type: Secunia Research 08/04/2008
Symantec Mail Security Applix Graphics Parsing Vulnerabilities

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2007-98/advisory/

Source: CCN
Type: SECTRACK ID: 1019805
Symantec Mail Security Buffer Overflows in Autonomy KeyView Module Let Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1019805

Source: CCN
Type: SECTRACK ID: 1019844
IBM Lotus Notes Buffer Overflows in Applix Viewer Lets Remote Users Execute Arbitrary Code

Source: CCN
Type: IBM Technote (FAQ) 1298453
Potential security vulnerabilities in Lotus Notes file viewers for Applix Presents, Folio Flat File, HTML speed reader, KeyView and MIME

Source: CCN
Type: IBM Web site
Lotus Notes

Source: CCN
Type: Autonomy Web site
KeyView IDOL Export SDK

Source: CCN
Type: OSVDB ID: 44195
Autonomy Keyview Multiple Products Applix Graphics Reader (kpagrdr.dll) Token Parsing DoS

Source: BUGTRAQ
Type: UNKNOWN
20080414 Secunia Research: Lotus Notes Applix Graphics ParsingVulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20080414 Secunia Research: Autonomy Keyview Applix Graphics ParsingVulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20080414 Secunia Research: Symantec Mail Security Applix Graphics ParsingVulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20080414 Secunia Research: activePDF DocConverter Applix Graphics ParsingVulnerabilities

Source: BID
Type: UNKNOWN
28454

Source: CCN
Type: BID-28454
Autonomy KeyView Module Multiple Buffer Overflow Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1019844

Source: CCN
Type: Symantec Web site
Symantec Mail Security for SMTP

Source: VUPEN
Type: UNKNOWN
ADV-2008-1153

Source: VUPEN
Type: UNKNOWN
ADV-2008-1154

Source: VUPEN
Type: UNKNOWN
ADV-2008-1156

Source: XF
Type: UNKNOWN
autonomy-keyview-applix-dos(41722)

Source: XF
Type: UNKNOWN
autonomy-keyview-applix-dos(41722)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*

OR cpe:/a:symantec:mail_security:5.0:*:*:*:*:*:*:*

OR cpe:/a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*

OR cpe:/a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*

OR cpe:/a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*

OR cpe:/a:symantec:mail_security:*:*:domino:*:*:*:*:* (Version <= 7.5)

AND

cpe:/a:autonomy:keyview:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:autonomy:keyview_export_sdk:10.3:*:*:*:*:*:*:*

OR cpe:/a:autonomy:keyview_filter_sdk:10.3:*:*:*:*:*:*:*

OR cpe:/a:autonomy:keyview_viewer_sdk:10.3:*:*:*:*:*:*:*

OR cpe:/a:autonomy:keyview_viewer_sdk:10:*:*:*:*:*:*:*

OR cpe:/a:autonomy:keyview_filter_sdk:10:*:*:*:*:*:*:*

OR cpe:/a:autonomy:keyview_export_sdk:10:*:*:*:*:*:*:*

AND

cpe:/a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:activepdf:docconverter:3.8.4.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*

Denotes that component is vulnerable