CVE:CVE-2007-5405
CNNVD:CNNVD-200804-132
KeyView是用于导出、转换和查看各种格式文件的软件包。
Applix图形阅读器(kpagrdr.dll)在解析*BEGIN标签的ENCODING属性时没有安全地调用sscanf()，可能导致栈溢出，在解析输入文件的超长令牌时存在堆溢出，还可能出现死循环。
solution:Upgrade activepdf docconverter to a higher version than 3.8.2_.5,3.8.4.0,and avoid the version 3.8.2_.5,3.8.4.0; Upgrade autonomy keyview to a higher version than 2.0.0.2,10.3.0.0,and avoid the version 2.0.0.2,10.3.0.0; Upgrade ibm lotus_notes to a higher version than 6.0,6.5,7.0,7.0.2,7.0.3,and avoid the version 6.0,6.5,7.0,7.0.2,7.0.3; Upgrade symantec mail_security to a higher version than 5.0,5.0.0,5.0.1,7.5,and avoid the version 5.0,5.0.0,5.0.1,7.5; Upgrade symantec mail_security_appliance to a higher version than 5.0,and avoid the version 5.0