Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-4564


Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.


Published

2009-03-18T15:30:00.267

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application autonomy keyview_export_sdk ≤ 10.4 Yes
Application autonomy keyview_export_sdk 2.0 Yes
Application autonomy keyview_export_sdk 9.2.0 Yes
Application autonomy keyview_export_sdk 10 Yes
Application autonomy keyview_export_sdk 10.3 Yes
Application autonomy keyview_filter_sdk ≤ 10.4 Yes
Application autonomy keyview_filter_sdk 2.0 Yes
Application autonomy keyview_filter_sdk 9.2.0 Yes
Application autonomy keyview_filter_sdk 10 Yes
Application autonomy keyview_filter_sdk 10.3 Yes
Application autonomy keyview_viewer_sdk ≤ 10.4 Yes
Application autonomy keyview_viewer_sdk 2.0 Yes
Application autonomy keyview_viewer_sdk 9.2.0 Yes
Application autonomy keyview_viewer_sdk 10 Yes
Application autonomy keyview_viewer_sdk 10.3 Yes
Application ibm lotus_notes 5.0.3 Yes
Application ibm lotus_notes 5.0.12 Yes
Application ibm lotus_notes 6.0 Yes
Application ibm lotus_notes 6.0.1 Yes
Application ibm lotus_notes 6.0.2 Yes
Application ibm lotus_notes 6.0.3 Yes
Application ibm lotus_notes 6.0.4 Yes
Application ibm lotus_notes 6.0.5 Yes
Application ibm lotus_notes 6.5 Yes
Application ibm lotus_notes 6.5.1 Yes
Application ibm lotus_notes 6.5.2 Yes
Application ibm lotus_notes 6.5.3 Yes
Application ibm lotus_notes 6.5.4 Yes
Application ibm lotus_notes 6.5.5 Yes
Application ibm lotus_notes 6.5.5 Yes
Application ibm lotus_notes 6.5.5 Yes
Application ibm lotus_notes 6.5.6 Yes
Application ibm lotus_notes 6.5.6 Yes
Application ibm lotus_notes 7.0 Yes
Application ibm lotus_notes 7.0.1 Yes
Application ibm lotus_notes 7.0.2 Yes
Application ibm lotus_notes 7.0.2 Yes
Application ibm lotus_notes 7.0.3 Yes
Application ibm lotus_notes 8.0 Yes
Application symantec altiris_deployment_solution * Yes
Application symantec brightmail 5.0 Yes
Application symantec data_loss_prevention_detection_servers 7.0 Yes
Application symantec data_loss_prevention_detection_servers 8.0 Yes
Application symantec data_loss_prevention_detection_servers 8.1 Yes
Application symantec data_loss_prevention_detection_servers 8.1 Yes
Application symantec data_loss_prevention_endpoint_agents 8.0 Yes
Application symantec data_loss_prevention_endpoint_agents 8.1 Yes
Application symantec enforce 7.0 Yes
Application symantec enforce 8.0 Yes
Application symantec enforce 8.1 Yes
Application symantec enforce 8.1 Yes
Application symantec mail_security 5.0 Yes
Application symantec mail_security 5.0.0 Yes
Application symantec mail_security 5.0.0 Yes
Application symantec mail_security 5.0.0.24 Yes
Application symantec mail_security 5.0.1 Yes
Application symantec mail_security 5.0.1.181 Yes
Application symantec mail_security 5.0.1.182 Yes
Application symantec mail_security 5.0.1.189 Yes
Application symantec mail_security 5.0.1.200 Yes
Application symantec mail_security 5.0.10 Yes
Application symantec mail_security 5.0.11 Yes
Application symantec mail_security 6.0.6 Yes
Application symantec mail_security 6.0.7 Yes
Application symantec mail_security 7.5..4.29 Yes
Application symantec mail_security 7.5.3.25 Yes
Application symantec mail_security 7.5.5.32 Yes

References