NVD

Id
1062  
Name
CVE-2008-1101  
Description
Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-10  
Modified Date
2011-03-07  
Seq
2008-1101  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6538 1062 CVE-2008-1101 http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453  View
6539 1062 CVE-2008-1101 20080414 Secunia Research: Lotus Notes kvdocve.dll Path Processing BufferOverflow  View
6540 1062 CVE-2008-1101 28454  View
6541 1062 CVE-2008-1101 ADV-2008-1153  View
6542 1062 CVE-2008-1101 ADV-2008-1156  View
6543 1062 CVE-2008-1101 autonomy-keyview-kvdocve-bo(41725)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45982 JVNDB-2008-001292 Autonomy KeyView の kvdocve.dll におけるバッファオーバーフローの脆弱性 Autonomy KeyView の KeyView ドキュメントビューイングエンジンにおける kvdocve.dll には、pathname 値の取り扱いに不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2008-1101 31214 CVE-2008-1101 1062 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001292.html 2008-04-10 2008-05-02 View