Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x up to and including 8.x, allow user-assisted remote malicious users to execute arbitrary code via the (1) Length and (2) Value fields for certain Types in a Lotus 1-2-3 (.123) file in the Worksheet File (WKS) format, as demonstrated by a file with a crafted SRANGE record, a different vulnerability than CVE-2007-5909.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm lotus notes 5.0 |
||
ibm lotus notes 8.0 |
||
ibm lotus notes 6.0 |
||
ibm lotus notes 6.5 |
||
ibm lotus notes 7.0 |