## https://sploitus.com/exploit?id=SAINT:2004BB48A798D60339B13B2CEE3A6369
Added: 12/07/2007
CVE: [CVE-2007-6593](<https://vulners.com/cve/CVE-2007-6593>)
BID: [26604](<http://www.securityfocus.com/bid/26604>)
OSVDB: [40796](<http://www.osvdb.org/40796>)
### Background
[Lotus Notes](<http://www.lotus.com/notes>) is the client for Lotus Domino servers. Lotus Notes uses the [Autonomy KeyView](<http://www.autonomy.com/content/Products/KeyView/index.en.html>) library to process files in the Lotus Worksheet File format (WKS) used by Lotus 1-2-3.
### Problem
A buffer overflow vulnerability in the Autonomy KeyView library allows command execution when a user views a specially crafted worksheet attachment in Lotus Notes.
### Resolution
Contact IBM support for a patch or apply one of the workarounds described in the IBM [Technote](<http://www-1.ibm.com/support/docview.wss?uid=swg21285600>).
### References
<http://archives.neohapsis.com/archives/fulldisclosure/2007-11/0540.html>
### Limitations
Exploit works on Lotus Notes 7.0.2 and requires a user to view the e-mail attachment.
### Platforms
Windows 2000
Windows XP