Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.
2009-09-01T16:30:00.767
2025-04-09T00:30:58.490
Deferred
CVSSv2: 9.3 (HIGH)
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | lotus_notes | 5.0 | Yes |
| Application | ibm | lotus_notes | 5.0.1 | Yes |
| Application | ibm | lotus_notes | 5.0.2 | Yes |
| Application | ibm | lotus_notes | 5.0.3 | Yes |
| Application | ibm | lotus_notes | 5.0.4 | Yes |
| Application | ibm | lotus_notes | 5.0.5 | Yes |
| Application | ibm | lotus_notes | 5.0.6 | Yes |
| Application | ibm | lotus_notes | 5.0.9a | Yes |
| Application | ibm | lotus_notes | 5.0.10 | Yes |
| Application | ibm | lotus_notes | 5.0.11 | Yes |
| Application | ibm | lotus_notes | 5.0.12 | Yes |
| Application | ibm | lotus_notes | 5.02 | Yes |
| Application | ibm | lotus_notes | 6.0 | Yes |
| Application | ibm | lotus_notes | 6.0.1 | Yes |
| Application | ibm | lotus_notes | 6.0.2 | Yes |
| Application | ibm | lotus_notes | 6.0.3 | Yes |
| Application | ibm | lotus_notes | 6.0.4 | Yes |
| Application | ibm | lotus_notes | 6.0.5 | Yes |
| Application | ibm | lotus_notes | 6.5 | Yes |
| Application | ibm | lotus_notes | 6.5.1 | Yes |
| Application | ibm | lotus_notes | 6.5.2 | Yes |
| Application | ibm | lotus_notes | 6.5.3 | Yes |
| Application | ibm | lotus_notes | 6.5.4 | Yes |
| Application | ibm | lotus_notes | 6.5.5 | Yes |
| Application | ibm | lotus_notes | 6.5.5 | Yes |
| Application | ibm | lotus_notes | 6.5.5 | Yes |
| Application | ibm | lotus_notes | 6.5.6 | Yes |
| Application | ibm | lotus_notes | 6.5.6 | Yes |
| Application | ibm | lotus_notes | 7.0 | Yes |
| Application | ibm | lotus_notes | 7.0.0 | Yes |
| Application | ibm | lotus_notes | 7.0.1 | Yes |
| Application | ibm | lotus_notes | 7.0.2 | Yes |
| Application | ibm | lotus_notes | 7.0.2 | Yes |
| Application | ibm | lotus_notes | 7.0.3 | Yes |
| Application | ibm | lotus_notes | 8.0 | Yes |
| Application | ibm | lotus_notes | 8.0.0 | Yes |
| Application | ibm | lotus_notes | 8.0.1 | Yes |
| Application | ibm | lotus_notes | 8.5 | Yes |
| Application | symantec | brightmail_appliance | 5.0 | Yes |
| Application | symantec | brightmail_appliance | 8.0.0 | Yes |
| Application | symantec | brightmail_appliance | 8.0.1 | Yes |
| Application | symantec | data_loss_prevention_detection_servers | 7.2 | Yes |
| Application | symantec | data_loss_prevention_detection_servers | 8.1.1 | Yes |
| Application | symantec | data_loss_prevention_detection_servers | 8.1.1 | Yes |
| Application | symantec | data_loss_prevention_detection_servers | 9.0.1 | Yes |
| Application | symantec | data_loss_prevention_detection_servers | 9.0.1 | Yes |
| Application | symantec | data_loss_prevention_endpoint_agents | 8.1.1 | Yes |
| Application | symantec | data_loss_prevention_endpoint_agents | 9.0.1 | Yes |
| Application | symantec | mail_security | 5.0 | Yes |
| Application | symantec | mail_security | 5.0.0 | Yes |
| Application | symantec | mail_security | 5.0.1 | Yes |
| Application | symantec | mail_security | 5.0.1.181 | Yes |
| Application | symantec | mail_security | 5.0.1.182 | Yes |
| Application | symantec | mail_security | 5.0.1.189 | Yes |
| Application | symantec | mail_security | 5.0.1.200 | Yes |
| Application | symantec | mail_security | 5.0.10 | Yes |
| Application | symantec | mail_security | 5.0.11 | Yes |
| Application | symantec | mail_security | 5.0.12 | Yes |
| Application | symantec | mail_security | 6.0.6 | Yes |
| Application | symantec | mail_security | 6.0.7 | Yes |
| Application | symantec | mail_security | 6.0.8 | Yes |
| Application | symantec | mail_security | 7.5.3.25 | Yes |
| Application | symantec | mail_security | 7.5.4.29 | Yes |
| Application | symantec | mail_security | 7.5.5.32 | Yes |
| Application | symantec | mail_security | 7.5.6 | Yes |
| Application | symantec | mail_security | 8.0 | Yes |
| Application | symantec | mail_security_appliance | 5.0 | Yes |
| Application | symantec | mail_security_appliance | 5.0.0.24 | Yes |
| Application | symantec | mail_security_appliance | 5.0.0.36 | Yes |
| Application | autonomy | keyview | * | Yes |