• info
• discussion
• exploit
• solution
• references

Autonomy KeyView Filter ZIP File Viewer Buffer Overflow Vulnerability

Autonomy KeyView Filter is prone to a buffer-overflow vulnerability because of a failure to properly bounds check user-supplied input.

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious file or email attachment.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously discussed in BID 47962 (IBM Lotus Notes Attachment Handling Multiple Buffer Overflow Vulnerabilities) but has been given its own record to better document it.