CVE-2009-3037

CVE-2009-3037 is a buffer overflow in the Autonomy KeyView XLS viewer (xlssr.dll) used by IBM Lotus Notes and multiple Symantec products (Mail Security, BrightMail, DLP, etc.). The overflow occurs while parsing Excel .xls attachments, enabling remote code execution by enticing a user to open a ma...

iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability

iDefense Security Advisory 08.25.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 25, 2009 I. BACKGROUND Autonomy KeyView SDK is a commercial SDK that provides many file format parsing libraries. It supports a large number of different document formats, one of which is the Microsoft...

Autonomy KeyView Module Excel Document Processing Buffer Overflow Vulnerability

Description Autonomy KeyView module is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers. Exploiting this issue will allow an attacker to corrupt memory and cause denial-of-service...

NaviCOPA Web Server 3.01 - Remote Buffer Overflow

NaviCOPA Web Server 3.01 - Remote Buffer Overflow / navicpntxp1.c NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit Cresit : http://milw0rm.com/exploits/7966 Thanks To: e.wiZz! Coded by : SimO-s0fT Madridista ; E-mail : OverflowsatHotmaildotcom Tested on Windows XP SP2 Francais , Win2k SP4...

CVE-2009-2543

CVE-2009-2543 (and closely related CVE-2009-1240) describes unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 (20081231) used in multiple IBM Proventia products that allow remote attackers to bypass malware detection by presenting modified archive formats (ZIP/CAB or RAR). The co...

RedHat Security Advisory RHSA-2009:0358

The remote host is missing updates announced in advisory RHSA-2009:0358. Evolution is the integrated collection of e-mail, calendaring, contact management, communications, and personal information management PIM tools for the GNOME desktop environment. It was discovered that evolution did not...

Symantec Products KeyView \"wp6sr.dll\" Buffer Overflow

CVE-2008-4564 Symantec Products KeyView "wp6sr.dll" Buffer Overflow Secunia Advisory: SA34307 Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment Release Date: 2009-03-17 Last Update: 2009-03-18 Popularity: 658 views...

Autonomy KeyView模块Word Perfect文件解析栈溢出漏洞

BUGTRAQ ID: 34086 CVECAN ID: CVE-2008-4564 KeyView是用于导出、转换和查看各种格式文件的软件包。 KeyView模块的wp6sr.dll库在处理Word Perfect文档时未经边界检查便将某些记录和数据拷贝到了固定大小的栈缓冲区中，如果用户受骗打开了恶意文档的话就可以触发栈溢出，导致执行任意代码。 IBM Lotus Notes 8.0 IBM Lotus Notes 7.0 IBM Lotus Notes 6.5 Symantec Mail Security 7.5.x Symantec Mail Security 6.0.x...

Stack overflow

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security SMS products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention DLP products, allows remote attackers to execute arbitrary code via a...

CVE-2008-4564

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security SMS products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention DLP products, allows remote attackers to execute arbitrary code via a...

CVE-2008-4564

A stack-based buffer overflow in Autonomy KeyView SDK wp6sr.dll (WordPerfect document parser) allows remote code execution. The CVE-2008-4564 issue affects IBM Lotus Notes (and other products using KeyView), caused by unbounded copying of records into a fixed-size stack buffer when processing WPD...

Symantec Products Update Vulnerable Autonomy KeyView Module

SUMMARY Symantec products that ship and use a third-party Autonomy KeyView module have updated the module to address a buffer overflow vulnerability reported against the KeyView module. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Mail Security for Domino |...

CVE-2009-0569

CVE-2009-0569 affects Becky! Internet Mail. The vulnerability is a buffer overflow in Becky! Internet Mail versions 2.48.02 and earlier triggered by a crafted read-receipt request in mail messages, allowing remote code execution. The OpenVAS/NVD and JVN entries corroborate the impact and affected...

Symantec Mail Security for SMTP < 5.0.1 Patch 200 Unspecified DoS

Symantec Mail Security for SMTP, which provides anti-spam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host is affected by an unspecified denial of service vulnerability. C...

CVE-2008-2379

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

ActivePDF / Lotus Notes / Symantec Mail Security / Autonomy Keyview multiple security vulnerabilities

Multiple buffer overflows on Folio Flat File / Applix graphics format parsing...

Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Symantec Mail Security for Microsoft Exchange Installed

Symantec Mail Security for Microsoft Exchange, a commercial antivirus software that offers mail protection against viruses, spam and other security threats is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31856; scriptversion"1.18";...

Buffer overflow

Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...

Code injection

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...