NetSight
IP …
critical9.3

CVE-2008-4564

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Syman…

Impact

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

Affected products

VendorProductAffected versions
AutonomyKeyview Export Sdk
through 10.4
Versions 2.0, 9.2.0, 10, 10.3
AutonomyKeyview Filter Sdk
through 10.4
Versions 2.0, 9.2.0, 10, 10.3
AutonomyKeyview Viewer Sdk
through 10.4
Versions 2.0, 9.2.0, 10, 10.3
IbmLotus Notes
Versions 5.0.3, 5.0.12, 6.0, 6.0.1, 6.0.2, 6.0.3
SymantecAltiris Deployment Solution
All versions
SymantecBrightmail
Version 5.0
SymantecData Loss Prevention Detection Servers
Versions 7.0, 8.0, 8.1
SymantecData Loss Prevention Endpoint Agents
Versions 8.0, 8.1
SymantecEnforce
Versions 7.0, 8.0, 8.1
SymantecMail Security
Versions 5.0, 5.0.0, 5.0.0.24, 5.0.1, 5.0.1.181, 5.0.1.182

Weakness classification

CWE-119

References