CVE-2009-3032 Integer overflow in n/a
Attackers can execute arbitrary code via crafted OLE documents exploiting an integer overflow in the KeyView Filter SDK used by various applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-3032?
CVE-2009-3032 is a critical vulnerability in Ibm Lotus Notes, published on 5 Mar 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Weakness: CWE-189
Which versions are affected by CVE-2009-3032?
It affects 6 products.
Products include Ibm Lotus Notes, Symantec Brightmail Gateway, Symantec Data Loss Prevention Detection Servers, Symantec Data Loss Prevention Endpoint Agents, Symantec Im Manager 2007, Symantec Mail Security.
How do I fix CVE-2009-3032?
No fix has been published for CVE-2009-3032 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-3032 being exploited?
There is no known exploitation of CVE-2009-3032 in the wild and no public exploit code.
Other vulnerabilities in Ibm Lotus Notes
Sources
Also known as GHSA-xpw9-59vc-m8w9.