CVE-2008-1101 - CVE House
Back to Database
Status published Critical CVE-2008-1101

Buffer overflow in kvdocve.dll in the KeyView document viewing engine...

Vulnerability Description

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1101

Credits & Attribution

No credits recorded in the NVD database.

References

More from autonomy

View All →
CVE-2012-6349
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL,...
Critical 9.3
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used...
Critical 9.3
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in...
Critical 9.3
CVE-2010-1525
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in...
Critical 9.3
CVE-2010-1524
The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4...
Critical 9.3

Affected Vendor

Affected Software

keyview, lotus notes
Vulnerable Versions:
2.0.0.2, 10.3.0.0, 6.0, 6.5, 7.0, 7.0.2, 7.0.3

Timeline

Official Publish: April 10th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.