CVE-2008-4564
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...
CVE-2008-4564 is a high vulnerability (CVSS 9.3) in Ibm Lotus Notes, published March 18, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.76%, the 93rd percentile. No source names a fixed version.
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
CVE-2008-4564- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
CVE-2008-4564- Updated
- 2026-11-02
EUVDEUVD-2008-4545 No score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
EUVD-2008-4545- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p66-f3jg-vmhh No score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
GHSA-6p66-f3jg-vmhh- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
symantec.com/avcenter/security/Content/2009.03.17a.html
vupen.com/english/advisories/2009/0744
secunia.com/advisories/34303
securitytracker.com/id?1021859
exchange.xforce.ibmcloud.com/vulnerabilities/49284
Show 14 moreShow less
www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573
securitytracker.com/id?1021856
kb.cert.org/vuls/id/276563
customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
osvdb.org/52713
labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
securityfocus.com/bid/34086
nvd.nist.gov/vuln/detail/CVE-2008-4564
github.com/advisories/GHSA-6p66-f3jg-vmhh