Symantec Products KeyView \"wp6sr.dll\" Buffer Overflow

CVE-2008-4564

Symantec Products KeyView "wp6sr.dll" Buffer Overflow
Secunia Advisory: SA34307 Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2009-03-17
Last Update: 2009-03-18
Popularity: 658 views

Critical:
Highly critical
Impact: DoS
System access

Where: From remote
Solution Status: Vendor Patch

OS: Symantec Mail Security Appliance 5.0.x

Software: Symantec Data Loss Prevention 7.x
Symantec Data Loss Prevention 8.x
Symantec Mail Security for Domino 7.x
Symantec Mail Security for Microsoft Exchange 5.x
Symantec Mail Security for SMTP 5.x

Subscribe: Instant alerts on relevant vulnerabilities

Advisory Content (Page 1 of 3) [ 1 ] [ 2 ] [ 3 ]

Description:
A vulnerability has been reported in various Symantec products, which can potentially be exploited by malicious people to compromise a vulnerable system.

For more information:
SA34318

Successful exploitation allows execution of arbitrary code.

The vulnerability affects the following products and versions:

• Symantec Mail Security for Domino 7.5.5.32, 7.5.4.29, and 7.5.3.25
• Symantec Mail Security for Microsoft Exchange 5.0.11, 5.0.10
• Symantec Mail Security for Microsoft Exchange 6.0.7, 6.0.6
• Symantec Mail Security for SMTP 5.0.x
• Symantec Mail Security Appliance/ Symantec BrightMail Appliance 5.0.x and later
• Symantec BrightMail Appliance All versions
• Symantec Data Loss Prevention Detection Servers/Enforce 7.x
• Symantec Data Loss Prevention Detection Servers/Enforce 8.0
• Symantec Data Loss Prevention Endpoint Agents 8.0
• Symantec Data Loss Prevention Detection Servers/Enforce for Windows 8.1.x
• Symantec Data Loss Prevention Detection Servers/Enforce for Linux 8.1.x
• Symantec Data Loss Prevention Endpoint Agents 8.1.x

Symantec Data Loss Prevention 7.x
Symantec Data Loss Prevention 8.x
Symantec Mail Security for Domino 7.x
Symantec Mail Security for Microsoft Exchange 5.x
Symantec Mail Security for SMTP 5.x
2009-03-18: Updated "Title" and "Description". Added link to "Original Advisory" section. Updated credits section.

Original Advisory:
iDefense:
<a href=“http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774” target=“_blank”>http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774</a>

Symantec:
<a href=“http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17a.html” target=“_blank”>http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17a.html</a>

Other References:
SA34318:
<a href=“http://secunia.com/advisories/34318/” target=“_blank”>http://secunia.com/advisories/34318/</a>