{"id":"CVE-2007-5406","aliases":["EUVD-2007-5382","GHSA-hwpm-rvvp-6j8w"],"status":"published","title":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity)...","description":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03003,"percentile":0.87478,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2008-04-10T18:00:00Z","modified":"2026-06-16T22:46:04Z","products":[{"vendor":"autonomy","product":"keyview"},{"vendor":"ibm","product":"lotus_notes"},{"vendor":"symantec","product":"mail_security"}],"references":[{"url":"http://secunia.com/advisories/28140","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-97/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27763","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490838/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41722","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-96/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1156","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28454","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-95/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1019844","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/490825/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1154","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/490837/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-98/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490839/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securitytracker.com/id?1019805","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1153","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5406"},{"url":"http://secunia.com/secunia_research/2007-95/advisory"},{"url":"http://secunia.com/secunia_research/2007-96/advisory"},{"url":"http://secunia.com/secunia_research/2007-97/advisory"},{"url":"http://secunia.com/secunia_research/2007-98/advisory"},{"url":"https://github.com/advisories/GHSA-hwpm-rvvp-6j8w"}],"sources":{"cve":[{"id":"CVE-2007-5406","description":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.","status":"published","published":"2008-04-10T18:00:00Z","modified":"2024-08-07T15:31:58.865Z","updated_at":"2026-11-02T13:32:00.617893Z"}],"euvd":[{"id":"EUVD-2007-5382","description":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.","status":"published","published":"2008-04-10T18:00:00Z","modified":"2024-08-07T15:31:58Z","updated_at":"2026-11-03T01:16:17.258093Z"}],"ghsa":[{"id":"GHSA-hwpm-rvvp-6j8w","title":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity)...","description":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.","status":"published","published":"2022-05-01T18:33:07Z","modified":"2025-04-09T03:53:29Z","updated_at":"2026-11-02T15:00:57.05109Z"}],"nvd":[{"id":"CVE-2007-5406","description":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file.","status":"published","published":"2008-04-10T18:05:00Z","modified":"2026-06-16T22:46:04.017Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:24.110006Z"}]}}
