CVEvulnerability
CVE-2009-3032
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Affected configurations
• ibm lotus notes 8.5
• symantec brightmail gateway 8.0
• symantec data loss prevention detection servers 8.1.1
• symantec data loss prevention detection servers 9.0.1
• symantec data loss prevention detection servers 10.0
• symantec data loss prevention endpoint agents 8.1.1
• symantec data loss prevention endpoint agents 9.0.1
• symantec data loss prevention endpoint agents 10.0
• symantec im manager 2007
• symantec mail security 5.0.0
• symantec mail security 5.0.1.181
• symantec mail security 5.0.1.182
• symantec mail security 5.0.1.189
• symantec mail security 5.0.11
• symantec mail security 5.0.12
• symantec mail security 5.0.13
• symantec mail security 6.0.6
• symantec mail security 6.0.7
• symantec mail security 6.0.8
• symantec mail security 7.5.3.25
• symantec mail security 7.5.4.29
• symantec mail security 7.5.5.32
• symantec mail security 7.5.6
• symantec mail security 7.5.7
• symantec mail security 7.5.8
• symantec mail security 8.0
• symantec mail security 8.0.1
• symantec mail security 8.0.2
Related
Weakness · not in database (1)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858 Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/38468 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00 www.symantec.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858 Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/38468 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00 www.symantec.com