critical9.3

CVE-2009-3037

Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Securi…

Impact

Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.

Affected products

Vendor	Product	Affected versions
Ibm	Lotus Notes	Versions 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5
Symantec	Brightmail Appliance	Versions 5.0, 8.0.0, 8.0.1
Symantec	Data Loss Prevention Detection Servers	Versions 7.2, 8.1.1, 9.0.1
Symantec	Data Loss Prevention Endpoint Agents	Versions 8.1.1, 9.0.1
Symantec	Mail Security	Versions 5.0, 5.0.0, 5.0.1, 5.0.1.181, 5.0.1.182, 5.0.1.189
Symantec	Mail Security Appliance	Versions 5.0, 5.0.0.24, 5.0.0.36
Autonomy	Keyview	All versions

Weakness classification

CWE-119

Impact

Affected products

Weakness classification

References