CVE-2008-1101

Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

• CWE-119

• http://secunia.com/advisories/28140Vendor Advisory
• http://secunia.com/advisories/28209Vendor Advisory
• http://secunia.com/advisories/28210Vendor Advisory
• http://secunia.com/secunia_research/2008-12/advisory/Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
• http://www.securityfocus.com/archive/1/490826/100/0/threaded
• http://www.securityfocus.com/bid/28454
• http://www.vupen.com/english/advisories/2008/1153
• http://www.vupen.com/english/advisories/2008/1156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41725
• http://secunia.com/advisories/28140Vendor Advisory
• http://secunia.com/advisories/28209Vendor Advisory
• http://secunia.com/advisories/28210Vendor Advisory
• http://secunia.com/secunia_research/2008-12/advisory/Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
• http://www.securityfocus.com/archive/1/490826/100/0/threaded
• http://www.securityfocus.com/bid/28454
• http://www.vupen.com/english/advisories/2008/1153
• http://www.vupen.com/english/advisories/2008/1156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41725

Published

Apr 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1095Unspecified vulnerability in the Internet Protocol (IP) impl…
• CVE-2008-1096The load_tile function in the XCF coder in coders/xcf.c in (…
• CVE-2008-1097Heap-based buffer overflow in the ReadPCXImage function in t…
• CVE-2008-1098Multiple cross-site scripting (XSS) vulnerabilities in MoinM…
• CVE-2008-1099_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier …
• CVE-2008-1100Buffer overflow in the cli_scanpe function in libclamav (lib…
• CVE-2008-1102Stack-based buffer overflow in the imb_loadhdr function in B…
• CVE-2008-1103Multiple unspecified vulnerabilities in Blender have unknown…
• CVE-2008-1104Stack-based buffer overflow in Foxit Reader before 2.3 build…
• CVE-2008-1105Heap-based buffer overflow in the receive_smb_raw function i…
• CVE-2008-1106The management interface in Akamai Client (formerly Red Swoo…
• CVE-2008-1107Multiple stack-based buffer overflows in the Danske Bank e-S…