Description
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
References
- 28140 third-party-advisory
- http://secunia.com/secunia_research/2007-106/advisory/
- 29342 third-party-advisory
- 27763 third-party-advisory
- http://www.symantec.com/avcenter/security/Content/2008.04.08e.html
- 28209 third-party-advisory
- ADV-2008-1156 vdb-entry
- 20080414 Secunia Research: activePDF DocConverter Folio Flat File ParsingBuffer Overflows mailing-list
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
- 28454 vdb-entry
- http://secunia.com/secunia_research/2007-105/advisory/
- 20080414 Secunia Research: Autonomy Keyview Folio Flat File Parsing BufferOverflows mailing-list
- 28210 third-party-advisory
- 20080414 Secunia Research: Symantec Mail Security Folio Flat File ParsingBuffer Overflows mailing-list
- 20080414 Secunia Research: Lotus Notes Folio Flat File Parsing BufferOverflows mailing-list
- autonomy-keyview-foliosr-bo(41716) vdb-entry
- ADV-2008-1154 vdb-entry
- 1019841 vdb-entry
- 1019805 vdb-entry
- ADV-2008-1153 vdb-entry
- http://secunia.com/secunia_research/2007-104/advisory/
- http://secunia.com/secunia_research/2007-107/advisory/