Unscored severity · published Mar 18, 2009
CVE-2008-4564
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail…
–
CVSS
6.8%
EPSS
No
On KEV
Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Altiris Deployment Solution · Symantec
All versions, or not specified · source: NVD
BR
Brightmail · Symantec
5.0 · source: NVD
DL
Data Loss Prevention Detection Servers · Symantec
7.0; 8.0; 8.1; 8.1 · source: NVD
DL
Data Loss Prevention Endpoint Agents · Symantec
8.0; 8.1 · source: NVD
EN
Enforce · Symantec
7.0; 8.0; 8.1; 8.1 · source: NVD
KE
Keyview Export Sdk · Autonomy
through 10.4; 2.0; 9.2.0; 10; 10.3 · source: NVD
KF
Keyview Filter Sdk · Autonomy
through 10.4; 2.0; 9.2.0; 10; 10.3 · source: NVD
KV
Keyview Viewer Sdk · Autonomy
through 10.4; 2.0; 9.2.0; 10; 10.3 · source: NVD
LN
Lotus Notes · Ibm
5.0.3; 5.0.12; 6.0; 6.0.1; 6.0.2; 6.0.3; +18 more · source: NVD
MS
Mail Security · Symantec
5.0; 5.0.0; 5.0.0; 5.0.0.24; 5.0.1; 5.0.1.181; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4564
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4564
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
osvdb.org
http://osvdb.org/52713
secunia.com
http://secunia.com/advisories/34303
Vendor Advisory
http://secunia.com/advisories/34307
secunia.com
http://secunia.com/advisories/34318
secunia.com
http://secunia.com/advisories/34355
More from Keyview Export Sdk
–
CVE-2010-1525
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers…
–
CVE-2010-1524
The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary…
–
CVE-2010-0135
Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute…
–
CVE-2010-0134
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code…
–
CVE-2010-0133
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products,…