CVE-2009-3032
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Desbordamiento de entero en kvolefio.dll v8.5.0.8339 y v10.5.0.0 en Autonomy KeyView Filter SDK, tal y como se utiliza en IBM Lotus Notes v8.5, Symantec Mail Security para Microsoft Exchange desde v5.0.10 hasta v5.0.13, y otros productos, permite a atacantes dependientes del contexto ejecutar codigo arbitrario a traves de documentos OLE que inicianun desbordamiento de memoria dinamica.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-08-31 CVE Reserved
- 2010-03-05 CVE Published
- 2023-03-22 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-189: Numeric Errors
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21440812 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/38468 | Vdb Entry | |
| http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Lotus Notes Search vendor "Ibm" for product "Lotus Notes" | 8.5 Search vendor "Ibm" for product "Lotus Notes" and version "8.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Brightmail Gateway Search vendor "Symantec" for product "Brightmail Gateway" | 8.0 Search vendor "Symantec" for product "Brightmail Gateway" and version "8.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 8.1.1 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "8.1.1" | linux |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 8.1.1 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "8.1.1" | windows |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 9.0.1 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "9.0.1" | linux |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 9.0.1 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "9.0.1" | windows |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 10.0 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "10.0" | linux |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Detection Servers Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" | 10.0 Search vendor "Symantec" for product "Data Loss Prevention Detection Servers" and version "10.0" | windows |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Endpoint Agents Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" | 8.1.1 Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" and version "8.1.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Endpoint Agents Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" | 9.0.1 Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" and version "9.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Data Loss Prevention Endpoint Agents Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" | 10.0 Search vendor "Symantec" for product "Data Loss Prevention Endpoint Agents" and version "10.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Im Manager 2007 Search vendor "Symantec" for product "Im Manager 2007" | * | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.0 Search vendor "Symantec" for product "Mail Security" and version "5.0.0" | smtp |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.1.181 Search vendor "Symantec" for product "Mail Security" and version "5.0.1.181" | smtp |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.1.182 Search vendor "Symantec" for product "Mail Security" and version "5.0.1.182" | smtp |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.1.189 Search vendor "Symantec" for product "Mail Security" and version "5.0.1.189" | smtp |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.11 Search vendor "Symantec" for product "Mail Security" and version "5.0.11" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.12 Search vendor "Symantec" for product "Mail Security" and version "5.0.12" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 5.0.13 Search vendor "Symantec" for product "Mail Security" and version "5.0.13" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 6.0.6 Search vendor "Symantec" for product "Mail Security" and version "6.0.6" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 6.0.7 Search vendor "Symantec" for product "Mail Security" and version "6.0.7" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 6.0.8 Search vendor "Symantec" for product "Mail Security" and version "6.0.8" | microsoft_exchange |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.3.25 Search vendor "Symantec" for product "Mail Security" and version "7.5.3.25" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.4.29 Search vendor "Symantec" for product "Mail Security" and version "7.5.4.29" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.5.32 Search vendor "Symantec" for product "Mail Security" and version "7.5.5.32" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.6 Search vendor "Symantec" for product "Mail Security" and version "7.5.6" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.7 Search vendor "Symantec" for product "Mail Security" and version "7.5.7" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 7.5.8 Search vendor "Symantec" for product "Mail Security" and version "7.5.8" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 8.0 Search vendor "Symantec" for product "Mail Security" and version "8.0" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 8.0.1 Search vendor "Symantec" for product "Mail Security" and version "8.0.1" | domino |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Mail Security Search vendor "Symantec" for product "Mail Security" | 8.0.2 Search vendor "Symantec" for product "Mail Security" and version "8.0.2" | domino |
Affected
| ||||||