9.3

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version6.0.1
Ibm ≫ Lotus Notes Version6.0.2
Ibm ≫ Lotus Notes Version6.0.3
Ibm ≫ Lotus Notes Version6.0.4
Ibm ≫ Lotus Notes Version6.0.5
Ibm ≫ Lotus Notes Version6.5
Ibm ≫ Lotus Notes Version6.5.1
Ibm ≫ Lotus Notes Version6.5.2
Ibm ≫ Lotus Notes Version6.5.3
Ibm ≫ Lotus Notes Version6.5.4
Ibm ≫ Lotus Notes Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.92% 0.94
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/16100
Patch
Vendor Advisory
http://secunia.com/advisories/16280
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-32/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2005-34/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2005-36/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2005-37/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2005-66/advisory/
Vendor Advisory
http://securitytracker.com/id?1015657
Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918
Patch
http://www.kb.cert.org/vuls/id/884076
Third Party Advisory
US Government Resource
http://www.osvdb.org/23064
Patch
http://www.osvdb.org/23065
Patch
http://www.osvdb.org/23066
Patch
http://www.osvdb.org/23067
Patch
http://www.osvdb.org/23068
Patch
http://www.securityfocus.com/archive/1/424626/100/0/threaded
http://www.securityfocus.com/archive/1/424666/100/0/threaded
http://www.securityfocus.com/archive/1/424689/100/0/threaded
http://www.securityfocus.com/archive/1/424692/100/0/threaded
http://www.securityfocus.com/bid/16576
http://www.vupen.com/english/advisories/2006/0500
http://www.vupen.com/english/advisories/2006/0501
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24635
https://exchange.xforce.ibmcloud.com/vulnerabilities/24636
https://exchange.xforce.ibmcloud.com/vulnerabilities/24638
https://exchange.xforce.ibmcloud.com/vulnerabilities/24639