vulnwire
9.3crit

CVE-2007-5406

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 87%
Public exploits
0
none known

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.

Exploit prediction (EPSS)

3.00% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • secunia.com /advisories/28140 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/29342 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /secunia_research/2007-97/advisory/ · x_refsource_MISC, x_transferred
  • secunia.com /advisories/27763 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/28209 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/490838/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/41722 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /secunia_research/2007-96/advisory/ · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2008/1156 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/28454 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /secunia_research/2007-95/advisory/ · x_refsource_MISC, x_transferred
  • secunia.com /advisories/28210 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1019844 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /archive/1/490825/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2008/1154 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /archive/1/490837/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /secunia_research/2007-98/advisory/ · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/490839/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securitytracker.com /id?1019805 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • vupen.com /english/advisories/2008/1153 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.