Lucene search

[email protected]CVE-2009-3032

HistoryMar 05, 2010 - 7:30 p.m.

CVE-2009-3032

2010-03-0519:30:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2009-3032

integer overflow

autonomy keyview filter sdk

ibm lotus notes

symantec mail security

ole document

buffer overflow

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

75.0%

JSON

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.

CPENameOperatorVersion
symantec:data_loss_prevention_detection_serverssymantec data loss prevention detection serverseq9.0.1
symantec:mail_securitysymantec mail securityeq8.0.2
symantec:im_manager_2007symantec im manager 2007eq*
symantec:mail_securitysymantec mail securityeq6.0.7
symantec:mail_securitysymantec mail securityeq7.5.7
symantec:mail_securitysymantec mail securityeq6.0.6
ibm:lotus_notesibm lotus noteseq8.5
symantec:data_loss_prevention_detection_serverssymantec data loss prevention detection serverseq10.0
symantec:mail_securitysymantec mail securityeq5.0.13
symantec:mail_securitysymantec mail securityeq8.0.1

CPE	Name	Operator	Version
symantec:data_loss_prevention_detection_servers	symantec data loss prevention detection servers	eq	9.0.1
symantec:mail_security	symantec mail security	eq	8.0.2
symantec:im_manager_2007	symantec im manager 2007	eq	*
symantec:mail_security	symantec mail security	eq	6.0.7
symantec:mail_security	symantec mail security	eq	7.5.7
symantec:mail_security	symantec mail security	eq	6.0.6
ibm:lotus_notes	ibm lotus notes	eq	8.5
symantec:data_loss_prevention_detection_servers	symantec data loss prevention detection servers	eq	10.0
symantec:mail_security	symantec mail security	eq	5.0.13
symantec:mail_security	symantec mail security	eq	8.0.1

Rows per page:

1-10 of 281

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=858

www-01.ibm.com/support/docview.wss?uid=swg21440812

www.securityfocus.com/bid/38468

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for CVE-2009-3032

prion1 symantec1 securityvulns2 nessus2