CVE-2007-5910 Memory corruption in n/a

Critical 9.3 Published 10 Nov 2007 Updated 7 Aug 2024

Remote attackers can execute arbitrary code by tricking users into opening a malicious WordPerfect file processed by the vulnerable KeyView SDK.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2007-5910?

CVE-2007-5910 is a critical memory corruption vulnerability in Ibm Lotus Notes, published on 10 Nov 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.

Weakness: CWE-119

Which versions are affected by CVE-2007-5910?

It affects 6 products.

Products include Activepdf Docconverter, Autonomy Keyview Export Sdk, Autonomy Keyview Filter Sdk, Autonomy Keyview Viewer Sdk, Ibm Lotus Notes, Symantec Mail Security.

How do I fix CVE-2007-5910?

No fix has been published for CVE-2007-5910 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-5910 being exploited?

There is no known exploitation of CVE-2007-5910 in the wild and no public exploit code.

All Ibm Lotus Notes vulnerabilities

Sources

Also known as GHSA-p542-8xvj-878h.