CVE-2007-5399: Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 1...

Security readout for executives and security teams

This is an old but serious email-parsing flaw. A crafted EML message with overly long headers could cause memory corruption in Autonomy/Verity KeyView 10.3.0.0, potentially allowing code execution in products that used that parser, including IBM Lotus Notes. Exposure is most likely in legacy environments that still use Autonomy/Verity KeyView 10.3.0.0 or IBM Lotus Notes components that parse EML files. Modern exposure is uncertain without asset validation because the source bundle lists normalized affected vendor and product as n/a. Prioritize validation if legacy Lotus Notes, archive, discovery, or mail-ingestion systems remain in use. The business risk is code execution through malicious email content, but urgency depends on whether vulnerable legacy parsing components still exist. Mitigation focus: Identify systems using KeyView 10.3.0.0 or emlsr.dll for EML parsing.; Check IBM, Autonomy, or current vendor guidance for supported fixes.; Reduce or disable untrusted EML parsing where operationally possible..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.