National Cyber-Alert System

Vulnerability Summary for CVE-2008-4564

Overview

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#276563

Name: VU#276563

Hyperlink:http://www.kb.cert.org/vuls/id/276563

External Source: CONFIRM

Name: https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html

Hyperlink:https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html

External Source: XF

Name: autonomy-keyview-wp6sr-bo(49284)

Hyperlink:http://xforce.iss.net/xforce/xfdb/49284

External Source: VUPEN

Name: ADV-2009-0757

Hyperlink:http://www.vupen.com/english/advisories/2009/0757

External Source: VUPEN

Name: ADV-2009-0756

Hyperlink:http://www.vupen.com/english/advisories/2009/0756

External Source: VUPEN

Name: ADV-2009-0744

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2009/0744

External Source: CONFIRM

Name: http://www.symantec.com/avcenter/security/Content/2009.03.17a.html

Type: Advisory

Hyperlink:http://www.symantec.com/avcenter/security/Content/2009.03.17a.html

External Source: SECTRACK

Name: 1021859

Hyperlink:http://www.securitytracker.com/id?1021859

External Source: BID

Name: 34086

Hyperlink:http://www.securityfocus.com/bid/34086

External Source: CONFIRM

Name: http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573

Type: Advisory

Hyperlink:http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573

External Source: SECTRACK

Name: 1021857

Hyperlink:http://securitytracker.com/id?1021857

External Source: SECTRACK

Name: 1021856

Hyperlink:http://securitytracker.com/id?1021856

External Source: SECUNIA

Name: 34355

Hyperlink:http://secunia.com/advisories/34355

External Source: SECUNIA

Name: 34318

Hyperlink:http://secunia.com/advisories/34318

External Source: SECUNIA

Name: 34307

Type: Advisory

Hyperlink:http://secunia.com/advisories/34307

External Source: SECUNIA

Name: 34303

Hyperlink:http://secunia.com/advisories/34303

External Source: OSVDB

Name: 52713

Hyperlink:http://osvdb.org/52713

External Source: IDEFENSE

Name: 20090317 Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774