CVE-2008-4564 Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Sy...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| autonomy keyview export sdk | <= 10.4 | No fix listed |
| autonomy keyview export sdk | = 2.0 | No fix listed |
| autonomy keyview export sdk | = 9.2.0 | No fix listed |
| autonomy keyview export sdk | = 10 | No fix listed |
| autonomy keyview export sdk | = 10.3 | No fix listed |
| autonomy keyview filter sdk | <= 10.4 | No fix listed |
| autonomy keyview filter sdk | = 2.0 | No fix listed |
| autonomy keyview filter sdk | = 9.2.0 | No fix listed |
| autonomy keyview filter sdk | = 10 | No fix listed |
| autonomy keyview filter sdk | = 10.3 | No fix listed |
| autonomy keyview viewer sdk | <= 10.4 | No fix listed |
| autonomy keyview viewer sdk | = 2.0 | No fix listed |
| autonomy keyview viewer sdk | = 9.2.0 | No fix listed |
| autonomy keyview viewer sdk | = 10 | No fix listed |
| autonomy keyview viewer sdk | = 10.3 | No fix listed |
| ibm lotus notes | = 5.0.3 | No fix listed |
| ibm lotus notes | = 5.0.12 | No fix listed |
| ibm lotus notes | = 6.0 | No fix listed |
| ibm lotus notes | = 6.0.1 | No fix listed |
| ibm lotus notes | = 6.0.2 | No fix listed |
| ibm lotus notes | = 6.0.3 | No fix listed |
| ibm lotus notes | = 6.0.4 | No fix listed |
| ibm lotus notes | = 6.0.5 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
| ibm lotus notes | = 6.5.1 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus notes | = 6.5.2 | No fix listed |
| ibm lotus notes | = 6.5.3 | No fix listed |
| ibm lotus notes | = 6.5.4 | No fix listed |
| ibm lotus notes | = 6.5.5 | No fix listed |
| ibm lotus notes | = 6.5.6 | No fix listed |
| ibm lotus notes | = 7.0 | No fix listed |
| ibm lotus notes | = 7.0.1 | No fix listed |
| ibm lotus notes | = 7.0.2 | No fix listed |
| ibm lotus notes | = 7.0.3 | No fix listed |
| ibm lotus notes | = 8.0 | No fix listed |
| symantec altiris deployment solution | All versions | No fix listed |
| symantec brightmail | = 5.0 | No fix listed |
| symantec data loss prevention detection servers | = 7.0 | No fix listed |
| symantec data loss prevention detection servers | = 8.0 | No fix listed |
| symantec data loss prevention detection servers | = 8.1 | No fix listed |
| symantec data loss prevention endpoint agents | = 8.0 | No fix listed |
| symantec data loss prevention endpoint agents | = 8.1 | No fix listed |
| symantec enforce | = 7.0 | No fix listed |
| symantec enforce | = 8.0 | No fix listed |
| symantec enforce | = 8.1 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0 | No fix listed |
| symantec mail security | = 5.0.0.24 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| symantec mail security | = 5.0.1.181 | No fix listed |
| symantec mail security | = 5.0.1.182 | No fix listed |
| symantec mail security | = 5.0.1.189 | No fix listed |
| symantec mail security | = 5.0.1.200 | No fix listed |
| symantec mail security | = 5.0.10 | No fix listed |
| symantec mail security | = 5.0.11 | No fix listed |
| symantec mail security | = 6.0.6-microsoft_exchange | No fix listed |
| symantec mail security | = 6.0.7-microsoft_exchange | No fix listed |
| symantec mail security | = 7.5..4.29 | No fix listed |
| symantec mail security | = 7.5.3.25 | No fix listed |
| symantec mail security | = 7.5.5.32 | No fix listed |
References
- 20090317 Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability third-party-advisory
- 52713 vdb-entry
- 34303 third-party-advisory
- 34307 third-party-advisory vendor-advisory
- 34318 third-party-advisory
- 34355 third-party-advisory
- 1021856 vdb-entry
- 1021857 vdb-entry
- www-01.ibm.com vendor-advisory
- VU#276563 third-party-advisory us-government-resource
- 34086 vdb-entry
- 1021859 vdb-entry
- www.symantec.com vendor-advisory
- ADV-2009-0744 vdb-entry vendor-advisory
- ADV-2009-0756 vdb-entry
- ADV-2009-0757 vdb-entry
- customers.autonomy.com
- autonomy-keyview-wp6sr-bo(49284) vdb-entry