Unscored severity · published Sep 1, 2009
CVE-2009-3037
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightmail Appliance · Symantec
5.0; 8.0.0; 8.0.1 · source: NVD
DL
Data Loss Prevention Detection Servers · Symantec
7.2; 8.1.1; 8.1.1; 9.0.1; 9.0.1 · source: NVD
DL
Data Loss Prevention Endpoint Agents · Symantec
8.1.1; 9.0.1 · source: NVD
KE
Keyview · Autonomy
All versions, or not specified · source: NVD
LN
Lotus Notes · Ibm
5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +32 more · source: NVD
MS
Mail Security · Symantec
5.0; 5.0.0; 5.0.1; 5.0.1.181; 5.0.1.182; 5.0.1.189; +12 more · source: NVD
MS
Mail Security Appliance · Symantec
5.0; 5.0.0.24; 5.0.0.36 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3037
Vendor Advisory
http://secunia.com/advisories/36472
Vendor Advisory
http://secunia.com/advisories/36474
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21396492
www.securityfocus.com
http://www.securityfocus.com/bid/36042
www.securityfocus.com
http://www.securityfocus.com/bid/36124
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00
More from Keyview
–
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF…
–
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment,…
–
CVE-2007-6020
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail…
–
CVE-2008-0066
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to…
–
CVE-2007-5399
Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute…