CVE-2007-6020 - CVE House
Back to Database
Status published Critical CVE-2007-6020

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat...

Vulnerability Description

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6020

Credits & Attribution

No credits recorded in the NVD database.

References

More from activepdf

View All →
CVE-2018-7264
The Pictview image processing library embedded in the ActivePDF toolkit...
Critical 9.8
CVE-2007-5910
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter,...
Critical 9.3
CVE-2007-5909
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer,...
Critical 9.3
CVE-2007-5405
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the...
Critical 9.3
CVE-2007-5397
Heap-based buffer overflow in the activePDF Server service (aka APServer.exe)...
High 7.5

Affected Vendor

Affected Software

docconverter, keyview, lotus notes, mail security, mail security appliance
Vulnerable Versions:
3.8.4.0, 2.0.0.2, 10.3.0.0, 6.0, 6.5, 7.0, 7.0.2, 7.0.3, 5.0, 5.0.0, 5.0.1, 7.5

Timeline

Official Publish: April 10th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.