Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0 as used by IBM Lotus Notes allow remote attackers to execute arbitrary code via a long (1) To (2) Cc (3) Bcc (4) From (5) Date (6) Subject (7) Priority (8) Importance or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header related to creation of an associated filename.