CVE-2008-4564

CVSS V2 High 9.3 CVSS V3 None
Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Overview
  • CVE ID
  • CVE-2008-4564
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-03-18T15:30:00
  • Last Modified Date
  • 2017-08-08T01:32:44
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:* 1 OR 10.4
cpe:2.3:a:autonomy:keyview_export_sdk:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_export_sdk:9.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_export_sdk:10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_export_sdk:10.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:* 1 OR 10.4
cpe:2.3:a:autonomy:keyview_filter_sdk:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_filter_sdk:9.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_filter_sdk:10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_filter_sdk:10.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:* 1 OR 10.4
cpe:2.3:a:autonomy:keyview_viewer_sdk:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_viewer_sdk:9.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_viewer_sdk:10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:autonomy:keyview_viewer_sdk:10.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:5.0.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp2:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp3:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:6.5.6:*:fp2:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:7.0.2:*:fp1:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:brightmail:5.0:*:appliance:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_detection_servers:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1:*:linux:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:enforce:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:enforce:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:enforce:8.1:*:linux:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:enforce:8.1:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0:*:appliance:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.1.181:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.1.182:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.1.189:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.1.200:*:smtp:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.10:*:microsoft_exchange:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:5.0.11:*:microsoft_exchange:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:6.0.6:microsoft_exchange:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:6.0.7:microsoft_exchange:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:7.5..4.29:*:domino:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:7.5.3.25:*:domino:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:mail_security:7.5.5.32:*:domino:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://secunia.com/advisories/34307 Vendor Advisory
http://www.securityfocus.com/bid/34086
http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 Vendor Advisory
https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
http://www.vupen.com/english/advisories/2009/0744 Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
http://www.symantec.com/avcenter/security/Content/2009.03.17a.html Vendor Advisory
http://securitytracker.com/id?1021856
http://securitytracker.com/id?1021857
http://secunia.com/advisories/34318
http://www.vupen.com/english/advisories/2009/0756
http://secunia.com/advisories/34355
http://www.vupen.com/english/advisories/2009/0757
http://secunia.com/advisories/34303
http://osvdb.org/52713
http://www.securitytracker.com/id?1021859
http://www.kb.cert.org/vuls/id/276563 US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/49284
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-4564
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4564
History
Created Old Value New Value Data Type Notes
2022-05-10 09:05:43 Added to TrackCVE