PT-2008-1486 · Autonomy · Applix Presents Reader+1

Publicado 2008-04-10 · Atualizado 2018-10-15 · CVE-2007-5406

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Applix Presents reader in Autonomy (formerly Verity) KeyView versions 2.0.0.2 through 10.3.0.0

Description The issue is related to the improper parsing of long tokens by the kpagrdr.dll, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted .ag file, leading to CPU and memory consumption.

Recommendations For versions 2.0.0.2 through 10.3.0.0, consider restricting access to the kpagrdr.dll until a patch is available to prevent the denial of service caused by crafted .ag files.

Correção

Identificadores relacionados

CVE-2007-5406

Produtos afetados

Applix Presents Reader

Keyview

Referências · 22

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5406 · Nota
• http://securitytracker.com/id?1019844 · Nota
• http://secunia.com/secunia_research/2007-95/advisory · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41722 · Nota
• http://secunia.com/secunia_research/2007-96/advisory · Aviso do Fabricante
• http://securitytracker.com/id?1019805 · Nota
• http://securityfocus.com/archive/1/490838/100/0/threaded · Nota
• http://vupen.com/english/advisories/2008/1156 · Nota
• http://vupen.com/english/advisories/2008/1154 · Nota
• http://securityfocus.com/archive/1/490839/100/0/threaded · Nota
• http://securityfocus.com/archive/1/490825/100/0/threaded · Nota
• http://secunia.com/secunia_research/2007-98/advisory · Aviso do Fabricante
• http://secunia.com/advisories/27763 · Aviso do Fabricante
• http://securityfocus.com/archive/1/490837/100/0/threaded · Nota
• http://vupen.com/english/advisories/2008/1153 · Nota