NVD

Id
58588  
Name
CVE-2007-6593  
Description
Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the (1) Length and (2) Value fields for certain Types in a Lotus 1-2-3 (.123) file in the Worksheet File (WKS) format, as demonstrated by a file with a crafted SRANGE record, a different vulnerability than CVE-2007-5909.  
Reject
 
CVSS Version
2  
CVSS Score
8.8  
Severity
High  
CVSS Base Score
8.8  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:N)  
Pub Date
2017-01-07  
Published
2007-12-28  
Modified Date
2011-03-07  
Seq
2007-6593  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300552 58588 CVE-2007-6593 20071127 CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor  View
300553 58588 CVE-2007-6593 3499  View
300554 58588 CVE-2007-6593 1019002  View
300555 58588 CVE-2007-6593 http://www.coresecurity.com/index.php5?action=item&id=2008  View
300556 58588 CVE-2007-6593 http://www.ibm.com/support/docview.wss?rs=475&uid=swg21285600  View
300557 58588 CVE-2007-6593 20071127 CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor  View
300558 58588 CVE-2007-6593 26604  View
300559 58588 CVE-2007-6593 1019096  View
300560 58588 CVE-2007-6593 ADV-2007-4012  View
300561 58588 CVE-2007-6593 ADV-2007-4020  View
300562 58588 CVE-2007-6593 lotus-123fileviewer-bo(38645)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52390 JVNDB-2007-001082 Autonomy KeyView における複数のバッファオーバーフローの脆弱性 IBM Lotus Notes で使用されている Autonomy (Verity) の KeyView SDK には、l123sr.dll において、Worksheet ファイル (WKS) フォーマットの Lotus 1-2-3 (.123) ファイル中の Length フィールドおよび Value フィールドのチェック処理に不備があり、複数のバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-6593 29948 CVE-2007-6593 58588 8.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001082.html 2007-12-28 2008-01-18 View