CVE-2005-2619

no score yetEPSS 3.3%

Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

autonomy:keyview_export_sdk
autonomy:keyview_filter_sdk
autonomy:keyview_viewer_sdk
ibm:lotus_notes

References

http://secunia.com/advisories/16100
http://secunia.com/advisories/16280
http://secunia.com/secunia_research/2005-30/advisory/
http://secunia.com/secunia_research/2005-66/advisory/
http://securitytracker.com/id?1015657

Check your stack JSON