#IBM LOTUS SYMPHONY IS AN EXAMPLE SOFTWARE#

Workaround 2: Delete the problem file l123sr.dll file. When a user clicks View (for any file), a dialog box will display with the message 'Unable to locate the viewer configuration file.'. Workaround 1: Delete the keyview.ini file in the Notes program directory. Lotus Notes customers should follow the instructions of the following support Technote.

#IBM LOTUS SYMPHONY IS AN EXAMPLE SOFTWARE#

Other software packages using Verity KeyView SDK using vulnerable versions of l123sr.dll.Lotus Notes version 6.5.6 (not confirmed by Core).Lotus Notes version 8.x (not confirmed by Core).

These vulnerabilities have been discovered and tested using Lotus Notes and the Verity KeyView SDK components it uses but other applications that use the Verity KeyView SDK may be also vulnerable. GIF) that more easily lure users into viewing it thus making it easier to succeed in the exploitation attempt. Exploitation of these vulnerabilities requires end-user interaction but the discrepancy described above could allow an attacker to send a malicious Lotus 1-2-3 file as an attachment with a seemingly innocuous extension (for example,В .JPG or.

Lotus Notes displays the file type and corresponding icon based on the attached fileвЂ™s extension rather than the MIME Content-Type header in the email whereas the view functionality is handled by the Verity KeyView component which processes the attachment based on the file contents. Exploitation of these vulnerabilities requires user intervention.ДЄlthough these specific vulnerabilities exist on a thirdвЂ“party component the problem is compound by the way Lotus Notes displays information about attachments, making it easier to elicit unsuspecting assistance from the users to exploit them. These vulnerabilities could allow attackers to remotely execute arbitrary commands on vulnerable systems by attaching a specially crafted file that triggers exploitation when unsuspecting users attempt to вЂњViewвЂќ the attachment. Several buffer overflow vulnerabilities were found in the third-party library used by Lotus Notes to process Lotus 1-2-3 file attachments. To preview and process files in the Lotus Worksheet File format (WKS) used by Lotus 1-2-3 the email client uses a library from a third-party software vendor (AutonomyвЂ™s Verity KeyView SDK). The email functionality of Lotus Notes supports previewing and processing file attachments in various formats. Lotus Notes is the integrated email, calendar, instant messenger, browser and business collaboration application developed by IBM to work as a desktop client in conjunction with IBMвЂ™s Lotus Domino server application. Release mode: COORDINATED RELEASE Vulnerability InformationД¬VE Name: CVE-2007-6593 Vulnerability Description

Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor

Ibm lotus symphony is an example