CVEvulnerability
CVE-2008-4564
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Affected configurations
• autonomy keyview export sdk (<= 10.4)
• autonomy keyview export sdk 2.0
• autonomy keyview export sdk 9.2.0
• autonomy keyview export sdk 10
• autonomy keyview export sdk 10.3
• autonomy keyview filter sdk (<= 10.4)
• autonomy keyview filter sdk 2.0
• autonomy keyview filter sdk 9.2.0
• autonomy keyview filter sdk 10
• autonomy keyview filter sdk 10.3
• autonomy keyview viewer sdk (<= 10.4)
• autonomy keyview viewer sdk 2.0
• autonomy keyview viewer sdk 9.2.0
• autonomy keyview viewer sdk 10
• autonomy keyview viewer sdk 10.3
• ibm lotus notes 5.0.3
• ibm lotus notes 5.0.12
• ibm lotus notes 6.0
• ibm lotus notes 6.0.1
• ibm lotus notes 6.0.2
• ibm lotus notes 6.0.3
• ibm lotus notes 6.0.4
• ibm lotus notes 6.0.5
• ibm lotus notes 6.5
• ibm lotus notes 6.5.1
• ibm lotus notes 6.5.2
• ibm lotus notes 6.5.3
• ibm lotus notes 6.5.4
• ibm lotus notes 6.5.5
• ibm lotus notes 6.5.6
• ibm lotus notes 7.0
• ibm lotus notes 7.0.1
• ibm lotus notes 7.0.2
• ibm lotus notes 7.0.3
• ibm lotus notes 8.0
• symantec altiris deployment solution
• symantec brightmail 5.0
• symantec data loss prevention detection servers 7.0
• symantec data loss prevention detection servers 8.0
• symantec data loss prevention detection servers 8.1
• symantec data loss prevention endpoint agents 8.0
• symantec data loss prevention endpoint agents 8.1
• symantec enforce 7.0
• symantec enforce 8.0
• symantec enforce 8.1
• symantec mail security 5.0
• symantec mail security 5.0.0
• symantec mail security 5.0.0.24
• symantec mail security 5.0.1
• symantec mail security 5.0.1.181
• symantec mail security 5.0.1.182
• symantec mail security 5.0.1.189
• symantec mail security 5.0.1.200
• symantec mail security 5.0.10
• symantec mail security 5.0.11
• symantec mail security 6.0.6
• symantec mail security 6.0.7
• symantec mail security 7.5..4.29
• symantec mail security 7.5.3.25
• symantec mail security 7.5.5.32
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774 labs.idefense.com
- http://osvdb.org/52713 osvdb.org
- http://secunia.com/advisories/34303 secunia.com
- http://secunia.com/advisories/34307 Vendor Advisory
- http://secunia.com/advisories/34318 secunia.com
- http://secunia.com/advisories/34355 secunia.com
- http://securitytracker.com/id?1021856 securitytracker.com
- http://securitytracker.com/id?1021857 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 Vendor Advisory
- http://www.kb.cert.org/vuls/id/276563 US Government Resource
- http://www.securityfocus.com/bid/34086 www.securityfocus.com
- http://www.securitytracker.com/id?1021859 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2009.03.17a.html Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0744 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0756 www.vupen.com
- http://www.vupen.com/english/advisories/2009/0757 www.vupen.com
- https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html customers.autonomy.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49284 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774 labs.idefense.com
- http://osvdb.org/52713 osvdb.org
- http://secunia.com/advisories/34303 secunia.com
- http://secunia.com/advisories/34307 Vendor Advisory
- http://secunia.com/advisories/34318 secunia.com
- http://secunia.com/advisories/34355 secunia.com
- http://securitytracker.com/id?1021856 securitytracker.com
- http://securitytracker.com/id?1021857 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 Vendor Advisory
- http://www.kb.cert.org/vuls/id/276563 US Government Resource
- http://www.securityfocus.com/bid/34086 www.securityfocus.com
- http://www.securitytracker.com/id?1021859 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2009.03.17a.html Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0744 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0756 www.vupen.com
- http://www.vupen.com/english/advisories/2009/0757 www.vupen.com
- https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html customers.autonomy.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49284 exchange.xforce.ibmcloud.com