What’s Vulnerable › Vulnerabilities

CVE-2009-3032

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-03-05 · updated 2026-06-16
• Weakness: CWE-189

Description

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.

Affected products

• IBM Lotus Notes: 8.5
• Symantec Brightmail Gateway: 8.0
• Symantec Data Loss Prevention Detection Servers: 8.1.1, 9.0.1, 10.0
• Symantec Data Loss Prevention Endpoint Agents: 8.1.1, 9.0.1, 10.0
• Symantec Im Manager 2007: all versions
• Symantec Mail Security: 5.0.0, 5.0.1.181, 5.0.1.182, 5.0.1.189, 5.0.11, 5.0.12 (+13)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
• http://www-01.ibm.com/support/docview.wss?uid=swg21440812
• http://www.securityfocus.com/bid/38468
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
• http://www-01.ibm.com/support/docview.wss?uid=swg21440812
• http://www.securityfocus.com/bid/38468
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00

Get alerted when CVE-2009-3032 or the next vulnerability affects your stack