CVE-2009-3032

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2010-03-05

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Lotus Notes (Ibm)
• Brightmail Gateway (Symantec)
• Data Loss Prevention Detection Servers (Symantec)
• Data Loss Prevention Endpoint Agents (Symantec)
• Im Manager 2007 (Symantec)
• Mail Security (Symantec)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
• http://www-01.ibm.com/support/docview.wss?uid=swg21440812
• http://www.securityfocus.com/bid/38468
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=…