Description
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.
References
- http://www.ibm.com/support/docview.wss?uid=swg21500034
- 47962 vdb-entry
- 20110524 CORE-2010-0908: Lotus Notes XLS viewer malformed BIFF record heap overflow mailing-list
- 44624 third-party-advisory
- http://www.coresecurity.com/content/LotusNotes-XLS-viewer-heap-overflow
- 8263 third-party-advisory
- oval:org.mitre.oval:def:14203 vdb-entry signature
- lotus-notes-xlssr-bo(67619) vdb-entry