Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
References
- http://www.symantec.com/avcenter/security/Content/2009.03.17a.html
- ADV-2009-0744 vdb-entry
- 34303 third-party-advisory
- 1021859 vdb-entry
- 34307 third-party-advisory
- autonomy-keyview-wp6sr-bo(49284) vdb-entry
- http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573
- 34318 third-party-advisory
- 1021856 vdb-entry
- 1021857 vdb-entry
- VU#276563 third-party-advisory
- ADV-2009-0756 vdb-entry
- https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
- 34355 third-party-advisory
- 52713 vdb-entry
- 20090317 Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability third-party-advisory
- 34086 vdb-entry
- ADV-2009-0757 vdb-entry