CVE-2007-5406

Description

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 25.81% Top 5%

Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/28140	third party advisory vendor advisory
http://secunia.com/advisories/29342	third party advisory vendor advisory
http://secunia.com/secunia_research/2007-97/advisory/	vendor advisory
http://secunia.com/advisories/27763	third party advisory vendor advisory
http://secunia.com/advisories/28209	third party advisory vendor advisory
http://www.securityfocus.com/archive/1/490838/100/0/threaded	mailing list
https://exchange.xforce.ibmcloud.com/vulnerabilities/41722	vdb entry
http://secunia.com/secunia_research/2007-96/advisory/	vendor advisory
http://www.vupen.com/english/advisories/2008/1156	vdb entry
http://www.securityfocus.com/bid/28454	vdb entry
http://secunia.com/secunia_research/2007-95/advisory/	vendor advisory
http://secunia.com/advisories/28210	third party advisory vendor advisory
http://www.securitytracker.com/id?1019844	vdb entry
http://www.securityfocus.com/archive/1/490825/100/0/threaded	mailing list
http://www.vupen.com/english/advisories/2008/1154	vdb entry
http://www.securityfocus.com/archive/1/490837/100/0/threaded	mailing list
http://secunia.com/secunia_research/2007-98/advisory/	vendor advisory
http://www.securityfocus.com/archive/1/490839/100/0/threaded	mailing list
http://securitytracker.com/id?1019805	vdb entry
http://www.vupen.com/english/advisories/2008/1153	vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-5406?: CVE-2007-5406 has been scored as a critical severity vulnerability.
How to fix CVE-2007-5406?: To fix CVE-2007-5406, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-5406 being actively exploited in the wild?: It is possible that CVE-2007-5406 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~26% probability that this vulnerability will be exploited by malicious actors in the next 30 days.