Unscored severity · published Mar 5, 2010
CVE-2009-3032
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BG
Brightmail Gateway · Symantec
8.0 · source: NVD
DL
Data Loss Prevention Detection Servers · Symantec
8.1.1; 8.1.1; 9.0.1; 9.0.1; 10.0; 10.0 · source: NVD
DL
Data Loss Prevention Endpoint Agents · Symantec
8.1.1; 9.0.1; 10.0 · source: NVD
IM
IM Manager 2007 · Symantec
All versions, or not specified · source: NVD
LN
Lotus Notes · Ibm
8.5 · source: NVD
MS
Mail Security · Symantec
5.0.0; 5.0.1.181; 5.0.1.182; 5.0.1.189; 5.0.11; 5.0.12; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3032
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3032
Exploit
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
www.securityfocus.com
http://www.securityfocus.com/bid/38468
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
More from Lotus Notes
7.8
CVE-2007-5544
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files…
7.0
CVE-2013-0522
The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving…
–
CVE-2014-3086
Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain…
–
CVE-2014-0892
IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute…
–
CVE-2012-6349
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka…