Search/CVE-2007-5909
● CVE

CVE-2007-5909

Vendorsymantec, ibm, autonomy, activepdfProductmail security, lotus notes, keyview export sdk, keyview filter sdk, keyview viewer sdk, docconverterDiscoveredNov 10, 2007UpdatedApr 23, 2026

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.

CVSS v3.1
—
EPSS
20.9%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
7 relationships
Timeline
disclosure → media coverage
Nov 10, 2007
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026