10

CVE-2009-3032

Exploit
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version 8.5
Symantec ≫ Brightmail Gateway Version 8.0
Symantec ≫ Data Loss Prevention Detection Servers Version 8.1.1 Edition linux
Symantec ≫ Data Loss Prevention Detection Servers Version 8.1.1 Edition windows
Symantec ≫ Data Loss Prevention Detection Servers Version 9.0.1 Edition linux
Symantec ≫ Data Loss Prevention Detection Servers Version 9.0.1 Edition windows
Symantec ≫ Data Loss Prevention Detection Servers Version 10.0 Edition linux
Symantec ≫ Data Loss Prevention Detection Servers Version 10.0 Edition windows
Symantec ≫ Mail Security Version 5.0.0 Edition smtp
Symantec ≫ Mail Security Version 5.0.1.181 Edition smtp
Symantec ≫ Mail Security Version 5.0.1.182 Edition smtp
Symantec ≫ Mail Security Version 5.0.1.189 Edition smtp
Symantec ≫ Mail Security Version 5.0.11 Edition microsoft_exchange
Symantec ≫ Mail Security Version 5.0.12 Edition microsoft_exchange
Symantec ≫ Mail Security Version 5.0.13 Edition microsoft_exchange
Symantec ≫ Mail Security Version 6.0.6 Edition microsoft_exchange
Symantec ≫ Mail Security Version 6.0.7 Edition microsoft_exchange
Symantec ≫ Mail Security Version 6.0.8 Edition microsoft_exchange
Symantec ≫ Mail Security Version 7.5.3.25 Edition domino
Symantec ≫ Mail Security Version 7.5.4.29 Edition domino
Symantec ≫ Mail Security Version 7.5.5.32 Edition domino
Symantec ≫ Mail Security Version 7.5.6 Edition domino
Symantec ≫ Mail Security Version 7.5.7 Edition domino
Symantec ≫ Mail Security Version 7.5.8 Edition domino
Symantec ≫ Mail Security Version 8.0 Edition domino
Symantec ≫ Mail Security Version 8.0.1 Edition domino
Symantec ≫ Mail Security Version 8.0.2 Edition domino
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.74% 0.884
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
Exploit
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/38468
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00