Buffer overflow in Autonomy Keyview
CVE-2009-3037
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 9.3 (High). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.057 (92.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.057 · newest: 0.057 · change: 0.000
Affected products
- Autonomy Keyview
- IBM Lotus Notes — versions 5.0, 5.0.1, 5.0.2
- Symantec Brightmail Appliance — versions 5.0, 8.0.0, 8.0.1
- Symantec Data Loss Prevention Detection Servers — versions 7.2, 8.1.1, 9.0.1
- Symantec Data Loss Prevention Endpoint Agents — versions 8.1.1, 9.0.1
- Symantec Mail Security — versions 5.0, 5.0.0, 5.0.1
- Symantec Mail Security Appliance — versions 5.0, 5.0.0.24, 5.0.0.36
Weakness classification (CWE)
References
- www.vupen.com/english/advisories/2009/2389 (Patch, vdb-entry, Vendor Advisory)
- www.securityfocus.com/bid/36042 (vdb-entry)
- secunia.com/advisories/36472 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/36474 (Vendor Advisory, third-party-advisory)
- www.symantec.com/security_response/securityupdates/detail.jsp
- www-01.ibm.com/support/docview.wss (Patch, Vendor Advisory)
- www.securityfocus.com/bid/36124 (vdb-entry)