CVE-2008-4564 - CVE House
Back to Database
Status published Critical CVE-2008-4564

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK...

Vulnerability Description

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4564

Credits & Attribution

No credits recorded in the NVD database.

References

More from autonomy

View All →
CVE-2012-6349
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL,...
Critical 9.3
CVE-2011-1512
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used...
Critical 9.3
CVE-2011-1218
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in...
Critical 9.3
CVE-2010-1525
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in...
Critical 9.3
CVE-2010-1524
The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4...
Critical 9.3

Affected Vendor

Affected Software

keyview export sdk, keyview filter sdk, keyview viewer sdk, lotus notes, altiris deployment solution, brightmail, data loss prevention detection servers, data loss prevention endpoint agents, enforce, mail security
Vulnerable Versions:
0, 2.0, 9.2.0, 10, 10.3, 5.0.3, 5.0.12, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 7.0, 7.0.1, 7.0.2, 7.0.3, 8.0, 5.0, 8.1, 5.0.0, 5.0.0.24, 5.0.1, 5.0.1.181, 5.0.1.182, 5.0.1.189, 5.0.1.200, 5.0.10, 5.0.11, 6.0.6, 6.0.7, 7.5..4.29, 7.5.3.25, 7.5.5.32

Timeline

Official Publish: March 18th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.