{"schemaVersion":3,"id":"CVE-2005-2618","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).","dates":{"published":"2006-02-15T00:00:00.000Z","modified":"2024-08-07T22:30:02.167Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.07922,"percentile":0.94684,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.07922},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.07922,"percentile":0.94684}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07922,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.07922,"percentile":0.94684}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"ibm","product":"lotus_notes","name":"lotus notes","label":"lotus_notes","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.1","noFixRecorded":false,"fixedIn":null},{"text":"6.0.2","noFixRecorded":false,"fixedIn":null},{"text":"6.0.3","noFixRecorded":false,"fixedIn":null},{"text":"6.0.4","noFixRecorded":false,"fixedIn":null},{"text":"6.0.5","noFixRecorded":false,"fixedIn":null},{"text":"6.5","noFixRecorded":false,"fixedIn":null},{"text":"6.5.1","noFixRecorded":false,"fixedIn":null},{"text":"6.5.2","noFixRecorded":false,"fixedIn":null},{"text":"6.5.3","noFixRecorded":false,"fixedIn":null},{"text":"6.5.4","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.1 | 6.0.2 | 6.0.3 | 6.0.4 | 6.0.5 | 6.5 | 6.5.1 | 6.5.2 | 6.5.3 | 6.5.4 | 7.0","eol":null,"hubHref":"/vendor/ibm/lotus_notes"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24635","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24635","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918","label":"www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918","hostname":"www-1.ibm.com","tags":["X Refsource CONFIRM","Patch"]},{"url":"http://secunia.com/secunia_research/2005-34/advisory/","label":"secunia.com/secunia_research/2005-34/advisory/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.osvdb.org/23067","label":"www.osvdb.org/23067","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24636","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24636","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.vupen.com/english/advisories/2006/0500","label":"www.vupen.com/english/advisories/2006/0500","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.vupen.com/english/advisories/2006/0501","label":"www.vupen.com/english/advisories/2006/0501","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/424626/100/0/threaded","label":"www.securityfocus.com/archive/1/424626/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.osvdb.org/23064","label":"www.osvdb.org/23064","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Patch"]},{"url":"http://www.osvdb.org/23066","label":"www.osvdb.org/23066","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Patch"]},{"url":"http://securitytracker.com/id?1015657","label":"securitytracker.com/id?1015657","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Patch"]},{"url":"http://secunia.com/secunia_research/2005-36/advisory/","label":"secunia.com/secunia_research/2005-36/advisory/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.osvdb.org/23065","label":"www.osvdb.org/23065","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Patch"]},{"url":"http://www.securityfocus.com/bid/16576","label":"www.securityfocus.com/bid/16576","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securityfocus.com/archive/1/424689/100/0/threaded","label":"www.securityfocus.com/archive/1/424689/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/16100","label":"secunia.com/advisories/16100","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24639","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24639","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24638","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24638","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/secunia_research/2005-32/advisory/","label":"secunia.com/secunia_research/2005-32/advisory/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/884076","label":"www.kb.cert.org/vuls/id/884076","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://secunia.com/secunia_research/2005-66/advisory/","label":"secunia.com/secunia_research/2005-66/advisory/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/424692/100/0/threaded","label":"www.securityfocus.com/archive/1/424692/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/16280","label":"secunia.com/advisories/16280","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/23068","label":"www.osvdb.org/23068","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Patch"]},{"url":"http://www.securityfocus.com/archive/1/424666/100/0/threaded","label":"www.securityfocus.com/archive/1/424666/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/secunia_research/2005-37/advisory/","label":"secunia.com/secunia_research/2005-37/advisory/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-02-15T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T22:30:02.167Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T12:27:16.866Z","stale":false,"partial":false}}