PT-2008-1486 · Autonomy · Applix Presents Reader+1

Published 2008-04-10 · Updated 2018-10-15 · CVE-2007-5406

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Applix Presents reader in Autonomy (formerly Verity) KeyView versions 2.0.0.2 through 10.3.0.0

Description The issue is related to the improper parsing of long tokens by the kpagrdr.dll, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted .ag file, leading to CPU and memory consumption.

Recommendations For versions 2.0.0.2 through 10.3.0.0, consider restricting access to the kpagrdr.dll until a patch is available to prevent the denial of service caused by crafted .ag files.

Fix

Related Identifiers

CVE-2007-5406

Affected Products

Applix Presents Reader

Keyview

References · 22

• http://secunia.com/secunia_research/2007-95/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-96/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-98/advisory · Vendor Advisory
• http://secunia.com/advisories/27763 · Vendor Advisory
• http://secunia.com/advisories/29342 · Vendor Advisory
• http://secunia.com/advisories/28210 · Vendor Advisory
• http://secunia.com/advisories/28140 · Vendor Advisory
• http://secunia.com/advisories/28209 · Vendor Advisory
• http://secunia.com/secunia_research/2007-97/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5406 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5406 · Note
• http://securitytracker.com/id?1019844 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41722 · Note
• http://securitytracker.com/id?1019805 · Note
• http://securityfocus.com/archive/1/490838/100/0/threaded · Note