9.3
CRITICAL
CVE-2008-4564
IBM Lotus Notes Symantec Mail Security Buffer Overflow Vulnerability
Description

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

INFO

Published Date :

March 18, 2009, 3:30 p.m.

Last Modified :

Nov. 21, 2024, 12:51 a.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

10.0

Exploitability Score :

8.6
Affected Products

The following products are affected by CVE-2008-4564 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Symantec altiris_deployment_solution
2 Symantec brightmail
3 Symantec data_loss_prevention_detection_servers
4 Symantec data_loss_prevention_endpoint_agents
5 Symantec enforce
6 Symantec mail_security
1 Autonomy keyview_export_sdk
2 Autonomy keyview_filter_sdk
3 Autonomy keyview_viewer_sdk
1 Ibm lotus_notes
: Total Affected Vendor : 3 | Products : 10
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2008-4564.

URL Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
http://osvdb.org/52713
http://secunia.com/advisories/34303
http://secunia.com/advisories/34307 Vendor Advisory
http://secunia.com/advisories/34318
http://secunia.com/advisories/34355
http://securitytracker.com/id?1021856
http://securitytracker.com/id?1021857
http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 Vendor Advisory
http://www.kb.cert.org/vuls/id/276563 US Government Resource
http://www.securityfocus.com/bid/34086
http://www.securitytracker.com/id?1021859
http://www.symantec.com/avcenter/security/Content/2009.03.17a.html Vendor Advisory
http://www.vupen.com/english/advisories/2009/0744 Vendor Advisory
http://www.vupen.com/english/advisories/2009/0756
http://www.vupen.com/english/advisories/2009/0757
https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/49284
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
http://osvdb.org/52713
http://secunia.com/advisories/34303
http://secunia.com/advisories/34307 Vendor Advisory
http://secunia.com/advisories/34318
http://secunia.com/advisories/34355
http://securitytracker.com/id?1021856
http://securitytracker.com/id?1021857
http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 Vendor Advisory
http://www.kb.cert.org/vuls/id/276563 US Government Resource
http://www.securityfocus.com/bid/34086
http://www.securitytracker.com/id?1021859
http://www.symantec.com/avcenter/security/Content/2009.03.17a.html Vendor Advisory
http://www.vupen.com/english/advisories/2009/0744 Vendor Advisory
http://www.vupen.com/english/advisories/2009/0756
http://www.vupen.com/english/advisories/2009/0757
https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/49284

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2008-4564 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2008-4564 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
    Added Reference http://osvdb.org/52713
    Added Reference http://secunia.com/advisories/34303
    Added Reference http://secunia.com/advisories/34307
    Added Reference http://secunia.com/advisories/34318
    Added Reference http://secunia.com/advisories/34355
    Added Reference http://securitytracker.com/id?1021856
    Added Reference http://securitytracker.com/id?1021857
    Added Reference http://www.kb.cert.org/vuls/id/276563
    Added Reference http://www.securityfocus.com/bid/34086
    Added Reference http://www.securitytracker.com/id?1021859
    Added Reference http://www.symantec.com/avcenter/security/Content/2009.03.17a.html
    Added Reference http://www.vupen.com/english/advisories/2009/0744
    Added Reference http://www.vupen.com/english/advisories/2009/0756
    Added Reference http://www.vupen.com/english/advisories/2009/0757
    Added Reference http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573
    Added Reference https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
    Added Reference https://exchange.xforce.ibmcloud.com/vulnerabilities/49284
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Aug. 08, 2017

    Action Type Old Value New Value
    Removed Reference http://xforce.iss.net/xforce/xfdb/49284 [No Types Assigned]
    Added Reference https://exchange.xforce.ibmcloud.com/vulnerabilities/49284 [No Types Assigned]
  • Initial Analysis by [email protected]

    Mar. 19, 2009

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

95.68 }} 2.60%

score

0.99571

percentile

CVSS2 - Vulnerability Scoring System
Access Vector
Access Complexity
Authentication
Confidentiality
Integrity
Availability
: