CVE-2007-5399 Memory corruption in n/a
Remote attackers can execute arbitrary code via crafted EML headers in Autonomy KeyView, affecting applications like IBM Lotus Notes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2007-5399?
CVE-2007-5399 is a critical memory corruption vulnerability in Ibm Lotus Notes, published on 10 Apr 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long (1) To, (2) Cc, (3) Bcc, (4) From, (5) Date, (6) Subject, (7) Priority, (8) Importance, or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header, related to creation of an associated filename.
Weakness: CWE-119
Which versions are affected by CVE-2007-5399?
It affects 2 products.
Products include Autonomy Keyview, Ibm Lotus Notes.
How do I fix CVE-2007-5399?
No fix has been published for CVE-2007-5399 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-5399 being exploited?
There is no known exploitation of CVE-2007-5399 in the wild and no public exploit code.
Other vulnerabilities in Ibm Lotus Notes
Sources
Also known as GHSA-82x4-245q-4whp.