Autonomy KeyView SDK contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code.
Autonomy KeyView SDK is a commercial software development kit (SDK) that includes file filtering libraries. A vulnerability exists in the way the SDK libraries process specially crafted WordPerfect documents. According to iDefense:
This vulnerability exists within the "wp6sr.dll," which implements the processing of WordPerfect documents. When processing certain records, data is copied from the file into a fixed-size stack buffer without ensuring that enough space is available. By overflowing the buffer, an attacker can overwrite control flow structures stored on the stack.
An unauthenticated attacker may be able to execute arbitrary code or cause a vulnerable system to crash.
This issue was made public by iDefense
|Date First Published:||2009-03-19|
|Date Last Updated:||2009-04-30 18:30 UTC|