CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5399

Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long (1) To, (2) Cc, (3) Bcc, (4) From, (5) Date, (6) Subject, (7) Priority, (8) Importance, or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header, related to creation of an associated filename.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.334

EPSS Ranking 96.8%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2007-5399

Autonomy » Keyview » Version: 10.3.0.0

cpe:2.3:a:autonomy:keyview:10.3.0.0
Ibm » Lotus Notes » Version: 6.0

cpe:2.3:a:ibm:lotus_notes:6.0
Ibm » Lotus Notes » Version: 6.5

cpe:2.3:a:ibm:lotus_notes:6.5
Ibm » Lotus Notes » Version: 7.0

cpe:2.3:a:ibm:lotus_notes:7.0
Ibm » Lotus Notes » Version: 7.0.2

cpe:2.3:a:ibm:lotus_notes:7.0.2
Ibm » Lotus Notes » Version: 7.0.3

cpe:2.3:a:ibm:lotus_notes:7.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5399

Products

Pricing

Contact Us