← Vulnerability feed

Vulnerability record · CVE-2005-2618 · published 31 December 2005

CVE-2005-2618: Autonomy keyview export sdk memory buffer overflow vulnerability

Autonomy · Keyview Export Sdk

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).

9.3 CVSS 2.0 High EPSS 7.9% · top 5.5% CWE-119 · Memory buffer overflow
9.3CVSS 2.0 base score
7.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
52References
16 Jun 2026Last modified by NVD

Description

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/16100 PatchVendor Advisory
http://secunia.com/advisories/16280 PatchVendor Advisory
http://secunia.com/secunia_research/2005-32/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-34/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-36/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-37/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-66/advisory/ Vendor Advisory
http://securitytracker.com/id?1015657 Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918 Patch
http://www.kb.cert.org/vuls/id/884076 Third Party AdvisoryUS Government Resource
http://www.osvdb.org/23064 Patch
http://www.osvdb.org/23065 Patch
http://www.osvdb.org/23066 Patch
http://www.osvdb.org/23067 Patch
http://www.osvdb.org/23068 Patch
http://www.securityfocus.com/archive/1/424626/100/0/threaded
http://www.securityfocus.com/archive/1/424666/100/0/threaded
http://www.securityfocus.com/archive/1/424689/100/0/threaded
http://www.securityfocus.com/archive/1/424692/100/0/threaded
http://www.securityfocus.com/bid/16576
http://www.vupen.com/english/advisories/2006/0500
http://www.vupen.com/english/advisories/2006/0501 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24635
https://exchange.xforce.ibmcloud.com/vulnerabilities/24636
https://exchange.xforce.ibmcloud.com/vulnerabilities/24638
https://exchange.xforce.ibmcloud.com/vulnerabilities/24639
http://secunia.com/advisories/16100 PatchVendor Advisory
http://secunia.com/advisories/16280 PatchVendor Advisory
http://secunia.com/secunia_research/2005-32/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-34/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-36/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-37/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2005-66/advisory/ Vendor Advisory
http://securitytracker.com/id?1015657 Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918 Patch
http://www.kb.cert.org/vuls/id/884076 Third Party AdvisoryUS Government Resource
http://www.osvdb.org/23064 Patch
http://www.osvdb.org/23065 Patch
http://www.osvdb.org/23066 Patch
http://www.osvdb.org/23067 Patch

Track CVE-2005-2618 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-1608Ibm lotus notes memory buffer overflow vulnerabilityStack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unk…EPSS 5.8%10.0CVE-2009-3032Ibm lotus notes vulnerabilityInteger overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security f…EPSS 3.7%10.0CVE-2006-0119Ibm lotus domino vulnerabilityMultiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential secu…EPSS 3.8%10.0CVE-2004-2281Ibm lotus notes vulnerabilityMultiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java…EPSS 2.2%10.0CVE-2004-0480Ibm lotus notes argument injection vulnerabilityArgument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC …EPSS 8.6%9.3CVE-2012-6349Autonomy keyview idol memory buffer overflow vulnerabilityBuffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrar…EPSS 3.2%9.3CVE-2012-4821Ibm java vulnerabilityMultiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 …EPSS 6.9%9.3CVE-2012-4822Ibm java vulnerabilityMultiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 …EPSS 6.9%

Source: NIST National Vulnerability Database (record CVE-2005-2618), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.