CVE-2009-3032: Buffer Overflow
First published: Fri Mar 05 2010(Updated: )
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Notes | =8.5 | |
| Symantec Brightmail Gateway Appliance | =8.0 | |
| Symantec Data Loss Prevention | =8.1.1 | |
| Symantec Data Loss Prevention | =8.1.1 | |
| Symantec Data Loss Prevention | =9.0.1 | |
| Symantec Data Loss Prevention | =9.0.1 | |
| Symantec Data Loss Prevention | =10.0 | |
| Symantec Data Loss Prevention | =10.0 | |
| Symantec Data Loss Prevention | =8.1.1 | |
| Symantec Data Loss Prevention | =9.0.1 | |
| Symantec Data Loss Prevention | =10.0 | |
| Broadcom Symantec Identity Manager | ||
| Symantec Mail Security | =5.0.0 | |
| Symantec Mail Security | =5.0.1.181 | |
| Symantec Mail Security | =5.0.1.182 | |
| Symantec Mail Security | =5.0.1.189 | |
| Symantec Mail Security | =5.0.11 | |
| Symantec Mail Security | =5.0.12 | |
| Symantec Mail Security | =5.0.13 | |
| Symantec Mail Security | =6.0.6 | |
| Symantec Mail Security | =6.0.7 | |
| Symantec Mail Security | =6.0.8 | |
| Symantec Mail Security | =7.5.3.25 | |
| Symantec Mail Security | =7.5.4.29 | |
| Symantec Mail Security | =7.5.5.32 | |
| Symantec Mail Security | =7.5.6 | |
| Symantec Mail Security | =7.5.7 | |
| Symantec Mail Security | =7.5.8 | |
| Symantec Mail Security | =8.0 | |
| Symantec Mail Security | =8.0.1 | |
| Symantec Mail Security | =8.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/38468
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
Frequently Asked Questions
What is the severity of CVE-2009-3032?
CVE-2009-3032 has a critical severity rating due to its potential to allow arbitrary code execution by attackers.
How do I fix CVE-2009-3032?
To fix CVE-2009-3032, update the affected software to the latest version where the vulnerability is patched.
Which products are affected by CVE-2009-3032?
CVE-2009-3032 affects products such as IBM Lotus Notes 8.5 and various versions of Symantec Mail Security.
What type of vulnerability is CVE-2009-3032?
CVE-2009-3032 is an integer overflow vulnerability that can be exploited through crafted OLE documents.
Can CVE-2009-3032 be exploited remotely?
Yes, CVE-2009-3032 can be exploited remotely by an attacker via a specially crafted document.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/ibm
- canonical/ibm notes
- version/ibm notes/8.5
- vendor/symantec
- canonical/symantec brightmail gateway appliance
- version/symantec brightmail gateway appliance/8.0
- canonical/symantec data loss prevention
- version/symantec data loss prevention/8.1.1
- version/symantec data loss prevention/9.0.1
- version/symantec data loss prevention/10.0
- canonical/broadcom symantec identity manager
- canonical/symantec mail security
- version/symantec mail security/5.0.0
- version/symantec mail security/5.0.1.181
- version/symantec mail security/5.0.1.182
- version/symantec mail security/5.0.1.189
- version/symantec mail security/5.0.11
- version/symantec mail security/5.0.12
- version/symantec mail security/5.0.13
- version/symantec mail security/6.0.6
- version/symantec mail security/6.0.7
- version/symantec mail security/6.0.8
- version/symantec mail security/7.5.3.25
- version/symantec mail security/7.5.4.29
- version/symantec mail security/7.5.5.32
- version/symantec mail security/7.5.6
- version/symantec mail security/7.5.7
- version/symantec mail security/7.5.8
- version/symantec mail security/8.0
- version/symantec mail security/8.0.1
- version/symantec mail security/8.0.2