NVD

Id
68307  
Name
CVE-2005-2618  
Description
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-12-31  
Modified Date
2017-07-10  
Seq
2005-2618  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352981 68307 CVE-2005-2618 1015657  View
352982 68307 CVE-2005-2618 http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918  View
352983 68307 CVE-2005-2618 VU#884076  View
352984 68307 CVE-2005-2618 20060210 Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow  View
352985 68307 CVE-2005-2618 20060210 Secunia Research: Lotus Notes TAR Reader File Extraction BufferOverflow  View
352986 68307 CVE-2005-2618 20060210 Secunia Research: Lotus Notes UUE File Handling Buffer Overflow  View
352987 68307 CVE-2005-2618 20060210 Secunia Research: Lotus Notes HTML Speed Reader Link BufferOverflows  View
352988 68307 CVE-2005-2618 16576  View
352989 68307 CVE-2005-2618 ADV-2006-0500  View
352990 68307 CVE-2005-2618 ADV-2006-0501  View
352991 68307 CVE-2005-2618 lotus-kvarcve-filename-bo(24635)  View
352992 68307 CVE-2005-2618 lotus-uudrdr-uue-bo(24636)  View
352993 68307 CVE-2005-2618 lotus-tarrdr-filename-bo(24638)  View
352994 68307 CVE-2005-2618 lotus-htmsr-link-bo(24639)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57901 JVNDB-2006-000097 IBM Lotus Notes/Domino の添付ファイルの処理におけるスタックバッファオーバーフローの脆弱性 ------------ CVE-2005-2618 13822 CVE-2005-2618 68307 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000097.html 2006-02-10 2007-04-01 View