Description
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information.
Affected products
- Autonomy / keyview
- ibm / lotus_notes8.5.2.2
- ibm / lotus_notes3.0 – 3.0
- ibm / lotus_notes3.0.0.1 – 3.0.0.1
- ibm / lotus_notes3.0.0.2 – 3.0.0.2
- ibm / lotus_notes4.2 – 4.2
- ibm / lotus_notes4.2.1 – 4.2.1
- ibm / lotus_notes4.2.2 – 4.2.2
- ibm / lotus_notes4.5 – 4.5
- ibm / lotus_notes4.6 – 4.6
- ibm / lotus_notes4.6.7a – 4.6.7a
- ibm / lotus_notes4.6.7h – 4.6.7h
- ibm / lotus_notes5.0 – 5.0
- ibm / lotus_notes5.0.1 – 5.0.1
- ibm / lotus_notes5.0.1.02 – 5.0.1.02
- ibm / lotus_notes5.0.1a – 5.0.1a
- ibm / lotus_notes5.0.1b – 5.0.1b
- ibm / lotus_notes5.0.1c – 5.0.1c
- ibm / lotus_notes5.0.2 – 5.0.2
- ibm / lotus_notes5.0.2a – 5.0.2a
- ibm / lotus_notes5.0.2b – 5.0.2b
- ibm / lotus_notes5.0.2c – 5.0.2c
- ibm / lotus_notes5.0.3 – 5.0.3
- ibm / lotus_notes5.0.4 – 5.0.4
- ibm / lotus_notes5.0.4a – 5.0.4a
- ibm / lotus_notes5.0.5 – 5.0.5
- ibm / lotus_notes5.0.5.01 – 5.0.5.01
- ibm / lotus_notes5.0.5.02 – 5.0.5.02
- ibm / lotus_notes5.0.6 – 5.0.6
- ibm / lotus_notes5.0.6a – 5.0.6a
- ibm / lotus_notes5.0.6a.01 – 5.0.6a.01
- ibm / lotus_notes5.0.7 – 5.0.7
- ibm / lotus_notes5.0.7a – 5.0.7a
- ibm / lotus_notes5.0.8 – 5.0.8
- ibm / lotus_notes5.0.9 – 5.0.9
- ibm / lotus_notes5.0.9a – 5.0.9a
- ibm / lotus_notes5.0.10 – 5.0.10
- ibm / lotus_notes5.0.11 – 5.0.11
- ibm / lotus_notes5.0.12 – 5.0.12
- ibm / lotus_notes5.0a – 5.0a
- ibm / lotus_notes5.02 – 5.02
- ibm / lotus_notes6.0 – 6.0
- ibm / lotus_notes6.0.1 – 6.0.1
- ibm / lotus_notes6.0.1 – 6.0.1
- ibm / lotus_notes6.0.1 – 6.0.1
- ibm / lotus_notes6.0.1 – 6.0.1
- ibm / lotus_notes6.0.2 – 6.0.2
- ibm / lotus_notes6.0.2 – 6.0.2
- ibm / lotus_notes6.0.2 – 6.0.2
- ibm / lotus_notes6.0.2.2 – 6.0.2.2
- ibm / lotus_notes6.0.3 – 6.0.3
- ibm / lotus_notes6.0.4 – 6.0.4
- ibm / lotus_notes6.0.5 – 6.0.5
- ibm / lotus_notes6.5 – 6.5
- ibm / lotus_notes6.5.1 – 6.5.1
- ibm / lotus_notes6.5.2 – 6.5.2
- ibm / lotus_notes6.5.3 – 6.5.3
- ibm / lotus_notes6.5.3.1 – 6.5.3.1
- ibm / lotus_notes6.5.4 – 6.5.4
- ibm / lotus_notes6.5.4.1 – 6.5.4.1
- ibm / lotus_notes6.5.4.2 – 6.5.4.2
- ibm / lotus_notes6.5.4.3 – 6.5.4.3
- ibm / lotus_notes6.5.5 – 6.5.5
- ibm / lotus_notes6.5.5.1 – 6.5.5.1
- ibm / lotus_notes6.5.5.2 – 6.5.5.2
- ibm / lotus_notes6.5.5.3 – 6.5.5.3
- ibm / lotus_notes6.5.6 – 6.5.6
- ibm / lotus_notes6.5.6.1 – 6.5.6.1
- ibm / lotus_notes6.5.6.2 – 6.5.6.2
- ibm / lotus_notes6.5.6.3 – 6.5.6.3
- ibm / lotus_notes7.0 – 7.0
- ibm / lotus_notes7.0.0 – 7.0.0
- ibm / lotus_notes7.0.1 – 7.0.1
- ibm / lotus_notes7.0.1.1 – 7.0.1.1
- ibm / lotus_notes7.0.2 – 7.0.2
- ibm / lotus_notes7.0.2.1 – 7.0.2.1
- ibm / lotus_notes7.0.2.2 – 7.0.2.2
- ibm / lotus_notes7.0.2.3 – 7.0.2.3
- ibm / lotus_notes7.0.3 – 7.0.3
- ibm / lotus_notes7.0.3.1 – 7.0.3.1
- ibm / lotus_notes7.0.4 – 7.0.4
- ibm / lotus_notes7.0.4.0 – 7.0.4.0
- ibm / lotus_notes7.0.4.1 – 7.0.4.1
- ibm / lotus_notes7.0.4.2 – 7.0.4.2
- ibm / lotus_notes8.0 – 8.0
- ibm / lotus_notes8.0.0 – 8.0.0
- ibm / lotus_notes8.0.1 – 8.0.1
- ibm / lotus_notes8.0.2 – 8.0.2
- ibm / lotus_notes8.0.2.0 – 8.0.2.0
- ibm / lotus_notes8.0.2.1 – 8.0.2.1
- ibm / lotus_notes8.0.2.2 – 8.0.2.2
- ibm / lotus_notes8.0.2.3 – 8.0.2.3
- ibm / lotus_notes8.0.2.4 – 8.0.2.4
- ibm / lotus_notes8.0.2.5 – 8.0.2.5
- ibm / lotus_notes8.0.2.6 – 8.0.2.6
- ibm / lotus_notes8.5 – 8.5
- ibm / lotus_notes8.5.0.0 – 8.5.0.0
- ibm / lotus_notes8.5.0.1 – 8.5.0.1
- ibm / lotus_notes8.5.1 – 8.5.1
- ibm / lotus_notes8.5.1.0 – 8.5.1.0
- ibm / lotus_notes8.5.1.1 – 8.5.1.1
- ibm / lotus_notes8.5.1.2 – 8.5.1.2
- ibm / lotus_notes8.5.1.3 – 8.5.1.3
- ibm / lotus_notes8.5.1.4 – 8.5.1.4
- ibm / lotus_notes8.5.1.5 – 8.5.1.5
- ibm / lotus_notes8.5.2.0 – 8.5.2.0
- ibm / lotus_notes8.5.2.1 – 8.5.2.1
References
- MISChttp://www.ibm.com/support/docview.wss?uid=swg21500034
- MISChttp://www.securityfocus.com/bid/47962
- VENDOR_ADVISORYhttp://secunia.com/advisories/44624
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14238
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/67625