What’s Vulnerable › Vulnerabilities

CVE-2008-4564

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-03-18 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

Affected products

• Autonomy Keyview Export Sdk: through 10.4; 2.0, 9.2.0, 10, 10.3
• Autonomy Keyview Filter Sdk: through 10.4; 2.0, 9.2.0, 10, 10.3
• Autonomy Keyview Viewer Sdk: through 10.4; 2.0, 9.2.0, 10, 10.3
• IBM Lotus Notes: 5.0.3, 5.0.12, 6.0, 6.0.1, 6.0.2, 6.0.3 (+14)
• Symantec Altiris Deployment Solution: all versions
• Symantec Brightmail: 5.0
• Symantec Data Loss Prevention Detection Servers: 7.0, 8.0, 8.1
• Symantec Data Loss Prevention Endpoint Agents: 8.0, 8.1
• Symantec Enforce: 7.0, 8.0, 8.1
• Symantec Mail Security: 5.0, 5.0.0, 5.0.0.24, 5.0.1, 5.0.1.181, 5.0.1.182 (+9)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
• http://osvdb.org/52713
• http://secunia.com/advisories/34303
• http://secunia.com/advisories/34307
• http://secunia.com/advisories/34318
• http://secunia.com/advisories/34355
• http://securitytracker.com/id?1021856
• http://securitytracker.com/id?1021857
• http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573
• http://www.kb.cert.org/vuls/id/276563
• http://www.securityfocus.com/bid/34086
• http://www.securitytracker.com/id?1021859

Get alerted when CVE-2008-4564 or the next vulnerability affects your stack