Approved changes feed: RSS · Atom

cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*

part: a version: 3.8.2_.5 update: *

VendorActivepdf (024bdb31-55c1-58e2-8b21-4f782ae2f6c3)
ProductDocconverter (3f9f1b22-14b0-5836-8fd8-a355e03eb194)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/activepdf/docconverter purl2cpe 2026-06-01 10:12:41.051191

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5910 vulnerable 2026-06-03 14:28:28.085138 Details available
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file.
Published: 2007-11-10T02:00:00.000Z
Updated: 2024-08-07T15:47:00.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5909 vulnerable 2026-06-03 14:28:28.079924 Details available
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910.
Published: 2007-11-10T02:00:00.000Z
Updated: 2024-08-07T15:47:00.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5405 vulnerable 2026-06-03 14:28:26.713356 Details available
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag.
Published: 2008-04-10T18:00:00.000Z
Updated: 2024-08-07T15:31:58.216Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.